2 matches found
Fedora 44 : mingw-python-pip (2026-6edc44733c)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6edc44733c advisory. Update to pip-26.1.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
8CVSS7.7AI score0.00466EPSS
SaveExploits0References2
Medium: python-pip
Issue Overview: When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by usin...
5.9CVSS6.9AI score0.00469EPSS
SaveExploits0
20