1345 matches found
Amazon Linux 2023 : python3.14-pip, python3.14-pip-wheel (ALAS2023-2026-1653)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1653 advisory. pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferr...
Amazon Linux 2023 : python3.12-pip, python3.12-pip-wheel (ALAS2023-2026-1666)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1666 advisory. pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such...
Amazon Linux 2023 : python3.13-pip, python3.13-pip-wheel (ALAS2023-2026-1654)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1654 advisory. pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferr...
[SECURITY] Fedora 42 Update: uv-0.11.11-1.fc42
An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...
[SECURITY] Fedora 44 Update: uv-0.11.11-1.fc44
An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...
Fedora 44 : pypy (2026-130f7539d3)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-130f7539d3 advisory. Security fix for CVE-2026-3219 in the bundled pip wheel Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Fedora 43 : pypy (2026-3505a95524)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3505a95524 advisory. Security fix for CVE-2026-3219 in the bundled pip wheel Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Amazon Linux 2023 : python3-pip, python3-pip-wheel (ALAS2023-2026-1689)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1689 advisory. pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferr...
Malicious code in always-updates (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee16a964c16035579f7be2f965a801f87876080603f389e1e75ec3073bd5c2c The package's sole advertised CLI aupd, registered as a consolescripts entry point to alwaysupdates.main:main executes...
GHSA-QCCP-GFCP-XXVC vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, py3-opentelemetry-exporter-otlp, ansible-operator, openstack-kolla-toolbox-2025.2-fips, pgadmin4-fips, spamcheck, kubeflow-pipelines-visualization-server, aws-cli, text-generation-inference, keep-fips, tensorflow-cpu-jupyter, py3-pip,...
CVE-2026-44431 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, py3-opentelemetry-exporter-otlp, ansible-operator, openstack-kolla-toolbox-2025.2-fips, pgadmin4-fips, spamcheck, kubeflow-pipelines-visualization-server, aws-cli, text-generation-inference, keep-fips, tensorflow-cpu-jupyter, py3-pip,...
Fedora 45 : pypy (2026-b58cd376d6)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b58cd376d6 advisory. Automatic update for pypy-7.3.22-2.fc45. Changelog Tue May 5 2026 Charalampos Stratakis - 7.3.22-2 - Security fix for CVE-2026-3219 in the bundled pip wheel ...
CVE-2026-6357 vulnerabilities
Vulnerabilities for packages: py3-pip, py3-virtualenv, py3-cassandra-medusa, kubeflow-katib, datadog-agent, py3.14-virtualenv, pypy-3.10...
GHSA-JP4C-XJXW-MGF9 vulnerabilities
Vulnerabilities for packages: py3-pip, py3-virtualenv, py3-cassandra-medusa, kubeflow-katib, datadog-agent, py3.14-virtualenv, pypy-3.10...
GHSA-JP4C-XJXW-MGF9 vulnerabilities
Vulnerabilities for packages: localstack, py3-virtualenv, ansible-operator, nemo, py3.14-virtualenv, tensorflow-gpu-jupyter, datadog-agent, ansible-operator-fips, nvidia-nsight-compute-13.3, py3-hashin, pypy-3.10, py3-cassandra-medusa, nvidia-nsight-compute-13.2, nvidia-nsight-compute-13.1,...
CVE-2026-6357 vulnerabilities
Vulnerabilities for packages: localstack, py3-virtualenv, ansible-operator, nemo, py3.14-virtualenv, tensorflow-gpu-jupyter, datadog-agent, ansible-operator-fips, nvidia-nsight-compute-13.3, py3-hashin, pypy-3.10, py3-cassandra-medusa, nvidia-nsight-compute-13.2, nvidia-nsight-compute-13.1,...
groovestrike
GrooveStrike Autonomous Penetration Testing Framework...
CVE-2026-6357
A flaw was found in pip. Prior to version 26.1, pip's self-update check functionality would execute after installing wheel packages. This process involved importing newly installed Python modules. A malicious actor could craft a specially designed wheel package that, when installed, could lead to...
