Pip Maintainers Pip
2 CVEs affecting Pip Maintainers Pip. Latest disclosed: 2026-04-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5752 | Medium | 5.5 | 2023-10-25 | When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inje… |
CVE-2026-6357 | | 2026-04-27 | pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. Thes… |