Search for packages
| purl | pkg:pypi/pip@26.1.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8n5t-6n1v-8fg4 | python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite |
CVE-2026-8643
PYSEC-2026-196 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-05T17:05:44.763821+00:00 | PyPI Importer | Fixing | VCID-8n5t-6n1v-8fg4 | https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip | 38.6.0 |
| 2026-06-05T16:16:01.167868+00:00 | Pypa Importer | Fixing | VCID-8n5t-6n1v-8fg4 | https://github.com/pypa/advisory-database/blob/main/vulns/pip/PYSEC-2026-196.yaml | 38.6.0 |