Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pip@26.1
purl pkg:pypi/pip@26.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-8389-eyxv-9yh4 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation CVE-2026-6357
GHSA-jp4c-xjxw-mgf9
VCID-8pjz-m7ra-ykbu pip: pip: Incorrect file installation due to improper archive handling CVE-2026-3219
GHSA-58qw-9mgm-455v

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T08:49:09.625119+00:00 GithubOSV Importer Fixing VCID-8pjz-m7ra-ykbu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-58qw-9mgm-455v/GHSA-58qw-9mgm-455v.json 38.6.0
2026-05-29T08:48:57.446374+00:00 GithubOSV Importer Fixing VCID-8389-eyxv-9yh4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-jp4c-xjxw-mgf9/GHSA-jp4c-xjxw-mgf9.json 38.6.0