Product by Pypa
PyPA pip
10 known vulnerabilities in PyPA pip (Pypa), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2013-5123 | PyPA pip: security vulnerability | 5.9 | |
| High | CVE-2019-20916 | PyPA pip: Path Traversal | 7.5 | |
| High | CVE-2018-20225 | PyPA pip: security vulnerability | 7.8 | |
| Medium | CVE-2021-3572 | Python-pip: Improper Input Validation | 5.7 | |
| Not rated | CVE-2013-1629 | PyPA pip: Code Execution | — | |
| Medium | CVE-2026-13346 | pip absolute path traversal during download from malicious package indexes | 6.5 | |
| High | CVE-2026-8643 | pip can extract console_scripts and gui_scripts outside installation directory | 5.5 | |
| Medium | CVE-2023-5752 | Mercurial configuration injectable in repo revision when installing via pip | 5.5 | |
| Not rated | CVE-2014-8991 | PyPA pip: Denial of Service | — | |
| Not rated | CVE-2013-1888 | PyPA pip: security vulnerability | — |