Filters
Software
pip/pipMercurial configuration injectable in repo revision when installing via pip
5.5
EPSS
0.04%
First published (updated )
Fedoraproject FedoraPipenv's requirements.txt parsing allows malicious index url in comments
9.3
First published (updated )
Debian Debian LinuxThe mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and au…
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pypa pippip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package install…
6.2
First published (updated )
Fedoraproject Fedorapip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the…
6.2
First published (updated )