# pip (PyPI) vulnerabilities

13 known vulnerabilities (6 medium, 1 low), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/pip/

## Advisories (13)

### [CVE-2026-13346](https://cve.now/CVE-2026-13346): pip absolute path traversal during download from malicious package indexes

- Severity: Medium 5.6
- Published: Jul 29, 2026
- Affected: fixed in 26.2; fixed in 26.2.0.

### [CVE-2026-8643](https://cve.now/CVE-2026-8643): pip can extract console\_scripts and gui\_scripts outside installation directory

- Severity: Medium 4.1
- Published: Jun 1, 2026
- Affected: from 24.0, fixed in 26.1.2; fixed in 26.1.2.

### [CVE-2026-6357](https://cve.now/CVE-2026-6357): pip self-update functionality can import newly installed modules after wheel installation

- Severity: Medium 5.3
- Published: Apr 27, 2026
- Affected: fixed in 26.1; fixed in 26.1.

### [CVE-2026-3219](https://cve.now/CVE-2026-3219): pip doesn't reject concatenated ZIP and tar archives

- Severity: Medium 4.6
- Published: Apr 20, 2026
- Affected: fixed in 26.1; fixed in 26.1.

### [CVE-2026-1703](https://cve.now/CVE-2026-1703): Limited path traversal when installing wheel archives

- Severity: Low 2.0
- Published: Feb 2, 2026
- Affected: fixed in 26.0; fixed in 26.0.

### [CVE-2025-8869](https://cve.now/CVE-2025-8869): Fallback tar extraction in pip doesn't check symbolic links point to extraction directory

- Severity: Medium 5.9
- Published: Sep 24, 2025
- Affected: fixed in 25.3; fixed in 25.3.

### [CVE-2023-5752](https://cve.now/CVE-2023-5752): Mercurial configuration injectable in repo revision when installing via pip

- Severity: Medium 5.5
- Published: Oct 24, 2023
- Affected: version range not reported; fixed in 23.3.

### [CVE-2021-3572](https://cve.now/CVE-2021-3572): A flaw was found in python-pip in the way it handled Unicode separators in git references.

- Severity: Unrated
- Published: Nov 10, 2021
- Affected: fixed in 21.1.

### [CVE-2019-20916](https://cve.now/CVE-2019-20916): The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition…

- Severity: Unrated
- Published: Sep 4, 2020
- Affected: fixed in 19.2; fixed in 19.2.

### [CVE-2013-5123](https://cve.now/CVE-2013-5123): The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows…

- Severity: Unrated
- Published: Nov 5, 2019
- Affected: fixed in 1.5.

### [CVE-2014-8991](https://cve.now/CVE-2014-8991): pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build…

- Severity: Unrated
- Published: Nov 24, 2014
- Affected: from 1.3, fixed in 6.0.

### [CVE-2013-1888](https://cve.now/CVE-2013-1888): pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

- Severity: Unrated
- Published: Aug 16, 2013
- Affected: fixed in 1.3.

### [CVE-2013-1629](https://cve.now/CVE-2013-1629): pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which…

- Severity: Unrated
- Published: Aug 6, 2013
- Affected: fixed in 1.3.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/pip
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.