Pypa

Pypa Setuptools: Path Traversal

also in 11 other products

Remote Code Execution in pypa/setuptools

also in 8 other products

Pipenv's requirements.txt parsing allows malicious index url in comments

also in 1 other product

PyPA pip: security vulnerability

also in 5 other products

PyPA pip: Path Traversal

also in 4 other products

PyPA pip: security vulnerability

Python-pip: Improper Input Validation

also in 3 other products

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

wheel Allows Arbitrary File Permission Modification via Path Traversal

also in 4 other products

virtualenv activation scripts run code from a path that contains a placeholder name

virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

PyPA pip: Code Execution

virtualenv bash and fish activation scripts execute commands embedded in paths

also in 1 other product

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

also in 1 other product

Pypa Virtualenv: OS Command Injection

virtualenv: Bash prompt values can change meaning under older compatibility modes

virtualenv: Xonsh activation literals depend on the script decoding codec

virtualenv: Command injection via --prompt in activate.bat (batch activator)

also in 1 other product

pip absolute path traversal during download from malicious package indexes

also in 2 other products

pip can extract console_scripts and gui_scripts outside installation directory

also in 6 other products

Pypa Setuptools: Improper Handling of Unicode Encoding

also in 1 other product

Pypa Virtualenv: CRLF Injection

also in 1 other product

virtualenv: Deletion recovery can change a symlink target's mode