📦 Pip

This vulnerability in pip allows directory traversal attacks when installing packages from URLs. Attackers can overwrite arbitrary files on the system by exploiting the Content-Disposition header pars...

This CVE describes a dependency confusion vulnerability in pip where using --extra-index-url to install packages from private repositories can be exploited. Attackers can upload malicious packages wit...