PT-2020-22669

Name of the Vulnerable Software and Affected Versions pip versions prior to 19.2 Description The issue allows Directory Traversal when a URL is given in an install command. This is because a Content-Disposition header can contain ../ in a filename. For example, it can be used to overwrite the...

PT-2020-6270

Name of the Vulnerable Software and Affected Versions pip versions prior to 19.2 Description The issue allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename. This can be demonstrated by overwriting the...