Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

GHSA-wf93-45jw-7689

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wf93-45jw-7689

pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

gitlab/pypi/pip/CVE-2026-8643

pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

pypa/pip/PYSEC-2026-196

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

pysec/PYSEC-2026-196

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.