Lucene search
MitreCVELIST:CVE-2019-20916HistorySep 04, 2020 - 7:20 p.m.
CVE-2019-20916
2020-09-0419:20:55
mitre
raw.githubusercontent.com
1
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have …/ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Related
nessus
nessus
openSUSE Security Update : python-pip (openSUSE-2020-2169)
2020-12-07 00:00:00
EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2020-2490)
2020-12-01 00:00:00
SUSE SLES12 Security Update : python3 (SUSE-SU-2021:0344-1)
2021-02-09 00:00:00
osv
osv
PYSEC-2020-173
2020-09-04 20:15:00
CVE-2019-20916
2020-09-04 20:15:11
Path Traversal in pip
2021-06-09 17:35:04
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3596-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2020-2503)
2020-12-01 00:00:00
Debian: Security Advisory (DLA-2370-1)
2020-09-12 00:00:00
debiancve
debiancve
CVE-2019-20916
2020-09-04 20:15:00
suse
suse
Security update for python-setuptools (important)
2020-12-01 00:00:00
Security update for python-pip (moderate)
2020-10-04 00:00:00
Security update for python-pip (moderate)
2020-10-04 00:00:00
veracode
veracode
Directory Traversal
2019-06-13 01:55:10
ubuntu
ubuntu
pip vulnerability
2020-10-22 00:00:00
amazon
amazon
Medium: python-pip
2021-05-20 16:07:00
ibm
ibm
Security Bulletin: A vulnerability in Python affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2019-20916)
2023-01-12 21:59:00
oraclelinux
oraclelinux
python-virtualenv security update
2022-06-29 00:00:00
python-pip security update
2022-03-10 00:00:00
python-pip security update
2020-11-10 00:00:00
debian
debian
[SECURITY] [DLA 2370-1] python-pip security update
2020-09-11 10:16:32
redhat
redhat
(RHSA-2022:5234) Moderate: python-virtualenv security update
2022-06-28 07:52:36
(RHSA-2020:4432) Moderate: python-pip security update
2020-11-03 12:04:06
(RHSA-2020:4654) Moderate: python27:2.7 security update
2020-11-03 12:24:08
almalinux
almalinux
Moderate: python-pip security update
2020-11-03 12:04:06
Moderate: python27:2.7 security update
2020-11-03 12:24:08
redhatcve
redhatcve
CVE-2019-20916
2020-09-07 14:21:56
cbl_mariner
cbl_mariner
CVE-2019-20916 affecting package python-pip 18.0-5
2021-01-11 21:49:40
prion
prion
Directory traversal
2020-09-04 20:15:00
ubuntucve
ubuntucve
CVE-2019-20916
2020-09-04 00:00:00
centos
centos
python security update
2022-08-02 19:21:51
cve
cve
CVE-2019-20916
2020-09-04 20:15:00
github
github
Path Traversal in pip
2021-06-09 17:35:04
rocky
rocky
python27:2.7 security update
2020-11-03 12:24:08
redos
redos
ROS-20230619-05
2023-06-19 00:00:00
mageia
mageia
Updated python-pip packages fix security vulnerabilities
2021-01-25 18:25:52
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00