Количество 12
Количество 12
GHSA-jp4c-xjxw-mgf9
pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-6357
pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation.
CVE-2026-6357
pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation.
CVE-2026-6357
pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation.
CVE-2026-6357
pip self-update functionality can import newly installed modules after wheel installation
CVE-2026-6357
pip prior to version 26.1 would run self-update check functionality af ...
BDU:2026-09786
Уязвимость модуля pip языка программирования Python, связанная с включением функций из недостоверной контролируемой области, позволяющая нарушителю выполнить произвольный код
SUSE-SU-2026:2758-1
Security update for python-pip
openSUSE-SU-2026:20880-1
Security update for python-pip
SUSE-SU-2026:2634-1
Security update for python-pip
SUSE-SU-2026:2387-1
Security update for python
SUSE-SU-2026:2664-1
Security update for python, python-base, python-doc
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-jp4c-xjxw-mgf9 pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere | 0% Низкий | 3 месяца назад | |
 | CVE-2026-6357 pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation. | 0% Низкий | 3 месяца назад | |
 | CVE-2026-6357 pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation. | CVSS3: 5.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6357 pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation. | 0% Низкий | 3 месяца назад | |
 | CVE-2026-6357 pip self-update functionality can import newly installed modules after wheel installation | 0% Низкий | 3 месяца назад | |
| CVE-2026-6357 pip prior to version 26.1 would run self-update check functionality af ... | 0% Низкий | 3 месяца назад | |
 | BDU:2026-09786 Уязвимость модуля pip языка программирования Python, связанная с включением функций из недостоверной контролируемой области, позволяющая нарушителю выполнить произвольный код | CVSS3: 5.8 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:2758-1 Security update for python-pip | 29 дней назад | ||
| openSUSE-SU-2026:20880-1 Security update for python-pip | 2 месяца назад | ||
| SUSE-SU-2026:2634-1 Security update for python-pip | около 1 месяца назад | ||
| SUSE-SU-2026:2387-1 Security update for python | около 2 месяцев назад | ||
| SUSE-SU-2026:2664-1 Security update for python, python-base, python-doc | около 1 месяца назад |
Уязвимостей на страницу