Skip to content
OpenAdvisories

Product · Python Software Foundation

pymanager

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.6

    Possible to hijack modules in current working directory

    pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current working directory. As a result, if a user executes a pymanager-generated command (e.g., pip, pytest) from an attacker-controlled directory…