Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-1703

Опубликовано: 21 фев. 2026
Источник: msrc
EPSS Низкий

Описание

Limited path traversal when installing wheel archives

EPSS

Процентиль: 6%
0.00022
Низкий

Связанные уязвимости

ubuntu
около 2 месяцев назад

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

CVSS3: 3.9
redhat
около 2 месяцев назад

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

nvd
около 2 месяцев назад

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

debian
около 2 месяцев назад

When pip is installing and extracting a maliciously crafted wheel arch ...

suse-cvrf
около 2 месяцев назад

Security update for python-pip

EPSS

Процентиль: 6%
0.00022
Низкий