pypa Latest Vulnerabilities

Latest vulnerabilities published by pypa

JSON RSS CSV 🔔 Create Alert Trigger

22 January 2026

Vulnerability in wheel Command Line Tool Allows File Permission Modifications
CVE-2026-24049
PypaWheel7.1HIGH

10 January 2026

TOCTOU Vulnerability in virtualenv Affects Python Environment Management
CVE-2026-22702
PypaVirtualenv4.5MEDIUM

17 May 2025

Path Traversal Vulnerability in Setuptools Affects Python Package Management
CVE-2025-47273
PypaSetuptools7.7HIGH

15 July 2024

Remote Code Execution Vulnerability in Package Index Module
CVE-2024-6345
PypaPypa/setuptools8.8HIGH

10 January 2022

Pipenv's requirements.txt parsing allows malicious index url in comments
CVE-2022-21668
PypaPipenv👾🟡8HIGH

10 November 2021

Vulnerability in Python-Pip Affects Data Integrity for Remote Git Operations
CVE-2021-3572
PypaPython-pip👾🟡5.7MEDIUM

4 September 2020

Directory Traversal Vulnerability in Python PIP Package
CVE-2019-20916
PypaPip7.5HIGH

8 May 2020

Arbitrary Code Execution Vulnerability in Pip Software from PyPA
CVE-2018-20225
PypaPip👾🟡7.8HIGH

5 November 2019

Insecure DNS Querying in Python Pip Leading to Man-in-the-Middle Attacks
CVE-2013-5123
PypaPipEPSS 12%5.9MEDIUM

24 November 2014

Local Denial of Service Vulnerability in pip Product by Python Software Foundation
CVE-2014-8991
PypaPip

17 August 2013

Local File Overwrite Vulnerability in pip by Python Software Foundation
CVE-2013-1888
PypaPip

6 August 2013

Man-in-the-Middle Vulnerability in pip prior to 1.3
CVE-2013-1629
PypaPipEPSS 39%