{"id":"CVE-2023-5752","aliases":["GHSA-mq26-g339-26xf","PYSEC-2023-228"],"title":"Command Injection in pip when used with Mercurial","summary":"Command Injection in pip when used with Mercurial","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","vendor":"pip","product":"pip","ecosystem":"pip","affected":["pip < 23.3"],"patched":["pip 23.3"],"published":"2023-10-25","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:03.949904915Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-mq26-g339-26xf","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5752"},{"url":"https://github.com/pypa/pip/pull/12306"},{"url":"https://github.com/pypa/pip/commit/389cb799d0da9a840749fcd14878928467ed49b4"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2023-228.yaml"},{"url":"https://github.com/pypa/pip"},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00028.html"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/622OZXWG72ISQPLM5Y57YCVIMWHD4C3U"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXUVMJM25PUAZRQZBF54OFVKTY3MINPW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ"},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/F4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL"}],"tags":["osv","pip"],"epss":0.00476,"epssPercentile":0.40161,"ingestedAt":"2026-09-12T03:13:01.711Z","slug":"CVE-2023-5752","body":"## Overview\n\nWhen installing a package from a Mercurial VCS URL, e.g. `pip install hg+...`, with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the `hg clone` call (e.g. `--config`). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.\n\n## Affected packages\n\n- `pip < 23.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `pip 23.3`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}