Количество 7
Количество 7
CVE-2026-8643
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
CVE-2026-8643
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
CVE-2026-8643
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
CVE-2026-8643
pip can extract console_scripts and gui_scripts outside installation directory
CVE-2026-8643
pip would treat console_scripts and gui_scripts as paths instead of fi ...
GHSA-wf93-45jw-7689
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
SUSE-SU-2026:2634-1
Security update for python-pip
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. | CVSS3: 5.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. | CVSS3: 8 | 0% Низкий | 2 месяца назад |
 | CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. | CVSS3: 5.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-8643 pip can extract console_scripts and gui_scripts outside installation directory | 0% Низкий | около 2 месяцев назад | |
| CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of fi ... | CVSS3: 5.5 | 0% Низкий | около 2 месяцев назад |
| GHSA-wf93-45jw-7689 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. | CVSS3: 5.5 | 0% Низкий | около 2 месяцев назад |
 | SUSE-SU-2026:2634-1 Security update for python-pip | около 1 месяца назад |
Уязвимостей на страницу