Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Pip
MEDIUM 5.5
CVE-2026-8643
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation dire…
Fix: 26.1.2+
Fix from $1,600
2026-06-01
Pip
MEDIUM 5.7
CVE-2021-3572
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install…
Fix: 21.1+
Fix from $1,600
2021-11-10
Pip
HIGH 7.8
CVE-2018-20225
An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtai…
Mitigation only
Fix from $1,950
2020-05-08
Pip
MEDIUM 6.8
CVE-2013-1629EPSS 6%
pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-i…
Fix: 1.3+
Fix from $1,600
2013-08-06