Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-8643

Опубликовано: 08 июн. 2026
Источник: msrc
EPSS Низкий

Описание

pip can extract console_scripts and gui_scripts outside installation directory

EPSS

Процентиль: 25%
0.0032
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
5 месяцев назад

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

CVSS3: 8
redhat
6 месяцев назад

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

CVSS3: 5.5
nvd
5 месяцев назад

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

CVSS3: 5.5
debian
5 месяцев назад

pip would treat console_scripts and gui_scripts as paths instead of fi ...

suse-cvrf
5 месяцев назад

Security update for python-pip

EPSS

Процентиль: 25%
0.0032
Низкий