auto-dl (0.1.1), chalice (>=1.0.1, <=1.2.2) +14 more potentially affected by CVE-2021-3572 via pip (9.0.3)

pip PYPI version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - auto-dl 0.1.1 - chalice =1.0.1, =1.5.119, =1.0.0, =2.1.1.16070820, =2.1.1.16072018, =2.1.1.16070812, =1.5.6, =0.2.0, =2.1.6.16123016, =2.1.1.16070814,...

pycellfit (>=0.2.0, <=0.2.3) potentially affected by CVE-2021-3572 via pip (20.2.0)

pip PYPI version 20.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - pycellfit =0.2.0, =0.2.3 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

agave (>=0.0.1.dev0, <=0.0.5.dev0), always-updates (>=5.1.0, <=8.0.0) +21 more potentially affected by CVE-2021-3572 via pip (20.2.4)

pip PYPI version 20.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.0.1.dev0, =5.1.0, =0.1.0, =0.0.0, =0.0.1, =1.17.0, =2021.6.0.dev1, =0.0.0, =0.118.5, =2021.4.0b0, =0.2.2, =0.0.0.1.dev0, =1.2.0, =2021.4.1,...

aftool (>=0.1.2, <=0.2.8), agave (>=0.0.3, <=0.1.3.dev2) +23 more potentially affected by CVE-2021-3572 via pip (20.3.4)

pip PYPI version 20.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aftool =0.1.2, =0.0.3, =0.1.0.dev1, =1.21.5, =0.4.0, =1.0.2, =0.1.59, =0.4.3, =0.2.1, =2.6.0b1, =2020.0.1, =0.1.0, =2.4.6.20013014, =2.4.0.19073113,...

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

CVE-2021-3572

The CVE-2021-3572 issue affects python-pip and stems from how it handles Unicode separators in git references, with the potential to cause a different revision to be installed in a repository. The vulnerability affects data integrity and is mitigated by upgrading to python-pip version 21.1, which...

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

aadetools (>=0.0.3, <=0.0.5), aegea (>=2.0.0, <=2.2.5) +138 more potentially affected by CVE-2021-3572 via pip (>=1.5.6, <=21.0.1)

pip PYPI version =1.5.6, =0.0.3, =2.0.0, =0.1.2, =0.0.1.dev0, =5.1.0, =0.0.1, =0.0.0, =0.0.2, =0.1.17, =0.1.0, =0.0.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2021-3572 Source advisory: MEND:CVE-2021-3572...

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

CVE-2021-3572: Improper Input Validation

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

Low: Red Hat Security Advisory: python-pip security update

An update for python-pip is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

python-pip: Incorrect handling of unicode separators in git references

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity...

ALSA-2021:4455 Low: python-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fixes: python-pip:...

Low: python-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fixes: python-pip:...

python39:3.9 and python39-devel:3.9 security update

An update is available for python-more-itertools, pytest, python-psycopg2, python-lxml, python-PyMySQL, python3x-six, python-toml, python-urllib3, PyYAML, python-attrs, python-iniconfig, python-requests, modwsgi, python3x-pip, python-py, python-chardet, python-pluggy, Cython, python-psutil,...

RLSA-2021:4160 Moderate: python39:3.9 and python39-devel:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis

NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range from thousands to billions of edges. For this purpose, it implements efficient graph algorithms, many of them parallel to utilize multicor...

EulerOS 2.0 SP8 : python-pip (EulerOS-SA-2021-2484)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue t...