CLEANSTART-2026-RJ31158 Security fixes in miniforge3 26.1.1.3-r1

Package miniforge3 version 26.1.1.3-r1 fixes 1 vulnerabilities: CVE-2026-13346...

CLEANSTART-2026-JL46259 Security fixes in miniforge3 26.3.2.3-r1

Package miniforge3 version 26.3.2.3-r1 fixes 1 vulnerabilities: CVE-2026-13346...

SUSE SLED15 / SLES15 Security Update : python3-pip (SUSE-SU-2026:3588-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3588-1 advisory. This update for python3-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package...

SUSE SLED15 / SLES15 Security Update : python-pip (SUSE-SU-2026:3589-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3589-1 advisory. This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package UR...

SUSE-SU-2026:3588-1 Security update for python3-pip

This update for python3-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090...

Fedora 44 : mingw-python-pip (2026-676dfc2776)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-676dfc2776 advisory. Update to pip-26.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 43 : mingw-python-pip (2026-f7dddb6162)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f7dddb6162 advisory. Update to pip-26.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-pip: python-pip-wheel-26.2-0.1.hum1 noarch python3-pip-26.2-0.1.hum1 noarch python-pip-26.2-0.1.hum1.src src Security Fixes: python-pip: CVE-2026-13346...

CVE-2026-13346

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...

Linux Distros Unpatched Vulnerability : CVE-2026-13346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing...