CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2021:4160)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4160 advisory. - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS CVE-2021-28957 - python-ipaddress: Improper input validation ...

RHEL 8 : python-pip (RHSA-2021:4455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4455 advisory. pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package...

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2021-2720)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue t...

CentOS 8 : python-pip (CESA-2021:4455)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory. - python-pip: Incorrect handling of unicode separators in git references CVE-2021-3572 Note that Nessus has not tested for this issue but has instead relied onl...

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2021-2695)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue t...

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

AZL-86103 CVE-2021-3572 affecting package python-IPy 1.01-13

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

DEBIAN-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

uranium (>=0.2.23, <=0.2.34) potentially affected by CVE-2021-3572 via pip (7.1.2)

pip PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - uranium =0.2.23, =0.2.34 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

nexus-uploader (1.0.14), uranium (>=0.2.38, <=1.1.0) potentially affected by CVE-2021-3572 via pip (8.1.1)

pip PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - nexus-uploader 1.0.14 - uranium =0.2.38, =1.1.0 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

junctionart (>=0.1.0, <=0.1.2) potentially affected by CVE-2021-3572 via pip (20.3.1)

pip PYPI version 20.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - junctionart =0.1.0, =0.1.2 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2021-3572 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

cfn-docgen (>=0.2.0, <=0.2.3), chalice (>=1.13.0, <=1.14.0) +8 more potentially affected by CVE-2021-3572 via pip (20.0.2)

pip PYPI version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cfn-docgen =0.2.0, =1.13.0, =0.2.0, =0.0.1, =0.8.2, =0.3.1, =0.0.16, =0.0.24 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2021-3572 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +12 more potentially affected by CVE-2021-3572 via pip (>=21.0.0, <=21.0.1)

pip PYPI version =21.0.0, =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.1.0, =0.2.1 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2021-3572 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...