Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Damian Shaw

#21864of 60,399
14.2Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2026-45480
2026-05-28
8.0
CVE-2026-8643
Pypi
Pip
pip fails to sanitize the resolved absolute path to the installation directory when treating `console scripts` and `gui scripts` as paths rather than file names. This allows entry points to be installed outside the intended installation directory.
PT-2026-35435
2026-04-27
6.2
CVE-2026-6357
Pypi
Pip
The self-update check functionality runs after installing wheel files, which requires importing well-known Python module names. These imports were deferred to improve the startup time of the pip CLI. This behavior allows newly installed modules to be imported shortly after the installation of a wheel package.