CVE-2023-5752Medium· 5.5▾ SunlitCommand Injection in pip when used with Mercurial
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.5%
When installing a package from a Mercurial VCS URL, e.g. pip install hg+..., with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the hg clone call (e.g. --config). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip < 23.3Upgrade to a patched release:
pip 23.3Connected by shared product, vendor, weakness, or advisory.
CVE-2025-8869Mediumpip's fallback tar extraction doesn't check symbolic links point to extraction directory
CVE-2026-13346Medium· 6.5pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk e…
CVE-2026-3219Mediumpip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
CVE-2026-1703Lowpip Path Traversal vulnerability
CVE-2026-8643Medium· 5.5pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
CVE-2021-3572Medium· 5.7A flaw was found in python-pip in the way it handled Unicode separators in git references