Pypa CVEs & Vulnerabilities

1 CVEs affecting Pypa products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

pip 1

CVE-2026-8643MEDIUM

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

1 Jun 2026

5.5

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database