pypa Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by pypa

JSON RSS CSV 🔔 Create Alert Trigger

29 September 2026

Code Injection Vulnerability in Virtualenv by PyPa
CVE-2026-102937
PypaVirtualenv7.3HIGH
Dependency Installation Vulnerability in Virtualenv by Python Software Foundation
CVE-2026-102930
PypaVirtualenv7.7HIGH
Bash and Zsh Script Vulnerability in Virtualenv by Python Packaging Authority
CVE-2026-102925
PypaVirtualenv7.8HIGH

22 January 2026

Vulnerability in wheel Command Line Tool Allows File Permission Modifications
CVE-2026-24049
PypaWheel7.1HIGH

17 May 2025

Path Traversal Vulnerability in Setuptools Affects Python Package Management
CVE-2025-47273
PypaSetuptools👾🟡7.7HIGH

15 July 2024

Remote Code Execution Vulnerability in Package Index Module
CVE-2024-6345
PypaPypa/setuptools8.8HIGH

10 January 2022

Pipenv's requirements.txt parsing allows malicious index url in comments
CVE-2022-21668
PypaPipenv👾🟡8HIGH

4 September 2020

Directory Traversal Vulnerability in Python PIP Package
CVE-2019-20916
PypaPip7.5HIGH

8 May 2020

Arbitrary Code Execution Vulnerability in Pip Software from PyPA
CVE-2018-20225
PypaPip👾🟡7.8HIGH