Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-8643

Опубликовано: 08 июн. 2026
Источник: msrc
EPSS Низкий

Описание

pip can extract console_scripts and gui_scripts outside installation directory

EPSS

Процентиль: 24%
0.0032
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 2 месяцев назад

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

CVSS3: 8
redhat
2 месяца назад

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

CVSS3: 5.5
nvd
около 2 месяцев назад

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

CVSS3: 5.5
debian
около 2 месяцев назад

pip would treat console_scripts and gui_scripts as paths instead of fi ...

suse-cvrf
около 1 месяца назад

Security update for python-pip

EPSS

Процентиль: 24%
0.0032
Низкий