Количество 13
Количество 13
BDU:2026-09330
Уязвимость функции zipfile.is_zipfile() модуля pip языка программирования Python, позволяющая нарушителю записывать произвольные файлы
ROS-20260624-73-0017
Уязвимость python-pip
CVE-2026-3219
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.
CVE-2026-3219
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.
CVE-2026-3219
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.
CVE-2026-3219
pip doesn't reject concatenated ZIP and tar archives
CVE-2026-3219
pip handles concatenated tar and ZIP files as ZIP files regardless of ...
GHSA-58qw-9mgm-455v
pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
SUSE-SU-2026:2758-1
Security update for python-pip
openSUSE-SU-2026:20880-1
Security update for python-pip
SUSE-SU-2026:2634-1
Security update for python-pip
SUSE-SU-2026:2387-1
Security update for python
SUSE-SU-2026:2664-1
Security update for python, python-base, python-doc
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-09330 Уязвимость функции zipfile.is_zipfile() модуля pip языка программирования Python, позволяющая нарушителю записывать произвольные файлы | CVSS3: 3.3 | 0% Низкий | 4 месяца назад |
 | ROS-20260624-73-0017 Уязвимость python-pip | CVSS3: 3.3 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-3219 pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both. | 0% Низкий | 3 месяца назад | |
 | CVE-2026-3219 pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both. | CVSS3: 5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-3219 pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both. | 0% Низкий | 3 месяца назад | |
 | CVE-2026-3219 pip doesn't reject concatenated ZIP and tar archives | 0% Низкий | 3 месяца назад | |
| CVE-2026-3219 pip handles concatenated tar and ZIP files as ZIP files regardless of ... | 0% Низкий | 3 месяца назад | |
| GHSA-58qw-9mgm-455v pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files | 0% Низкий | 3 месяца назад | |
 | SUSE-SU-2026:2758-1 Security update for python-pip | около 1 месяца назад | ||
| openSUSE-SU-2026:20880-1 Security update for python-pip | 2 месяца назад | ||
| SUSE-SU-2026:2634-1 Security update for python-pip | около 1 месяца назад | ||
| SUSE-SU-2026:2387-1 Security update for python | около 2 месяцев назад | ||
| SUSE-SU-2026:2664-1 Security update for python, python-base, python-doc | около 1 месяца назад |
Уязвимостей на страницу