Python Packaging Authority vulnerabilities
Every vulnerability this feed holds for Python Packaging Authority, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
2 vulnerabilities tracked.
- 5.6 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk…
- 4.1 pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Python Packaging Authority is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Linux Red Hat IBM Microsoft Google Apple Apache Software Foundation Oracle Corporation zephyrproject n/a Unknown JetBrains Drupal Cisco Tanium OpenEMR go-vikunja Eclipse Foundation hickory-dns Samsung Semiconductor SuiteCRM n8n-io Grafana wazuh