PP
Vendor
Python Packaging Authority
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13346 | PI pip Python Packaging Authority | 6.5 | Jul 29 | pip absolute path traversal during download from malicious package indexes |
| CVE-2026-8643 | PI pip Python Packaging Authority | 5.5 | Jun 1 | pip can extract console_scripts and gui_scripts outside installation directory |
| CVE-2026-3219 | PI pip Python Packaging Authority | 4.6 | Apr 20 | pip doesn't reject concatenated ZIP and tar archives |
| CVE-2026-1703 | PI pip Python Packaging Authority | 2.0 | Feb 2 | Limited path traversal when installing wheel archives |
| CVE-2025-8869 | PI pip Python Packaging Authority | 5.9 | Sep 24 | Fallback tar extraction in pip doesn't check symbolic links point to extraction directory |