PY
Vendor
pypa
33
CVEs
0
On KEV
21
New 30D
Products
VI7.8
virtualenv
pypa
21 CVEs0 on KEV21 new
PI7.8
Pip
Pypa
10 CVEs0 on KEV0 new
PI8.6
Pipenv
Pypa
1 CVEs0 on KEV0 new
SE6.1
setuptools
pypa
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115586 New | VI virtualenv pypa | 7.1 | Oct 23 | virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9) |
| CVE-2026-113726 | VI virtualenv pypa | 7.8 | Oct 20 | virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST |
| CVE-2026-113776 | VI virtualenv pypa | 7.8 | Oct 20 | virtualenv activation scripts run code from a path that contains a placeholder name |
| CVE-2026-113732 | VI virtualenv pypa | 7.8 | Oct 20 | virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote |
| CVE-2026-113725 | VI virtualenv pypa | 7.8 | Oct 20 | virtualenv bash activate runs commands from an environment name with a backslash before $ |
| CVE-2026-113724 | VI virtualenv pypa | 4.5 | Oct 20 | virtualenv: Deletion recovery can change a symlink target's mode |
| CVE-2026-113723 | VI virtualenv pypa | 7.1 | Oct 20 | virtualenv: Bash prompt values can change meaning under older compatibility modes |
| CVE-2026-113722 | VI virtualenv pypa | 7.8 | Oct 20 | virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax |
| CVE-2026-113721 | VI virtualenv pypa | 4.5 | Oct 20 | virtualenv: Generated files can follow existing destination links |
| CVE-2026-113720 | VI virtualenv pypa | 4.4 | Oct 20 | virtualenv: Seeded files retain permissions from an older cache |
| CVE-2026-113715 | VI virtualenv pypa | 2.0 | Oct 20 | virtualenv: Venv configuration readback can reinterpret path boundaries |
| CVE-2026-113719 | VI virtualenv pypa | 4.5 | Oct 20 | virtualenv: Seed replacement does not contain metadata deletion paths |
| CVE-2026-113718 | VI virtualenv pypa | 7.1 | Oct 20 | virtualenv: Xonsh activation literals depend on the script decoding codec |
| CVE-2026-113717 | VI virtualenv pypa | 2.3 | Oct 20 | virtualenv: Pip seeding with download omits wheel digest verification |
| CVE-2026-113716 | VI virtualenv pypa | 4.5 | Oct 20 | virtualenv: Builtin creation follows linked environment directories |
| CVE-2026-113714 | VI virtualenv pypa | 2.3 | Oct 20 | virtualenv: Downloaded wheel selection and caching precede verification |
| CVE-2026-113713 | VI virtualenv pypa | 4.4 | Oct 20 | virtualenv: Temporary app-data can leave dangling seed package links |
| CVE-2026-102938 | VI virtualenv pypa | 5.8 | Sep 29 | virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection |
| CVE-2026-102937 | VI virtualenv pypa | 7.3 | Sep 29 | virtualenv: Command injection via --prompt in activate.bat (batch activator) |
| CVE-2026-102930 | VI virtualenv pypa | 7.7 | Sep 29 | virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use |
| CVE-2026-102925 | VI virtualenv pypa | 7.8 | Sep 29 | virtualenv bash and fish activation scripts execute commands embedded in paths |
| CVE-2026-13346 | PI Pip Pypa | 6.5 | Jul 29 | pip absolute path traversal during download from malicious package indexes |
| CVE-2026-59890 | SE setuptools pypa | 6.1 | Jul 8 | setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ |
| CVE-2026-8643 | PI Pip Pypa | 5.5 | Jun 1 | pip can extract console_scripts and gui_scripts outside installation directory |
| CVE-2023-5752 | PI Pip Pypa | 3.3 | Oct 25 | When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary… |
| CVE-2022-21668 | PI Pipenv Pypa | 8.6 | Jan 10 | pipenv is a Python development workflow tool |
| CVE-2021-3572 | PI Pip Pypa | 5.7 | Nov 10 | A flaw was found in python-pip in the way it handled Unicode separators in git references |
| CVE-2019-20916 | PI Pip Pypa | 7.5 | Sep 4 | The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as… |
| CVE-2018-20225 | PI Pip Pypa | 7.8 | May 8 | An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a… |
| CVE-2013-5123 | PI Pip Pypa | 5.9 | Nov 5 | The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks |
| CVE-2014-8991 | PI Pip Pypa | – | Nov 24 | pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user |
| CVE-2013-1888 | PI Pip Pypa | – | Aug 17 | pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory |
| CVE-2013-1629 | PI Pip Pypa | – | Aug 6 | pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to… |