Skip to content
OpenAdvisories

Package · Debian

python-pip

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.0
    CVE-2026-1703

    Limited path traversal when installing wheel archives

    When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable fi…

    Python Packaging Authority pip python-pip pip Debian Ubuntu PyPI