Mercurial configuration injectable in repo revision when installing via pip
...
5.5CVSS6.1AI score0.00476EPSS
SaveExploits0
Ubuntu•added 2021/05/19 10:47 a.m.•90 views
USN-4961-1: pip vulnerability
It was discovered that pip incorrectly handled unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository...
