Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-1703

Опубликовано: 21 фев. 2026
Источник: msrc
EPSS Низкий

Описание

Limited path traversal when installing wheel archives

EPSS

Процентиль: 32%
0.0039
Низкий

Связанные уязвимости

ubuntu
6 месяцев назад

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

CVSS3: 3.9
redhat
6 месяцев назад

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

nvd
6 месяцев назад

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

debian
6 месяцев назад

When pip is installing and extracting a maliciously crafted wheel arch ...

suse-cvrf
6 месяцев назад

Security update for python-pip

EPSS

Процентиль: 32%
0.0039
Низкий