Tagged “pip”
CVEs tagged pip, newest first.
4682 CVEsRSS
CVE-2021-21337Medium· 5.7PoCURL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
CVE-2021-21274Medium· 4.3Denial of service attack via .well-known lookups
Denial of service attack via .well-known lookups
CVE-2021-21273Low· 3.1Open redirects on some federation and push requests
Open redirects on some federation and push requests
CVE-2021-21330Low· 3.1`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
CVE-2021-21240High· 7.5Regular Expression Denial of Service (REDoS) in httplib2
Regular Expression Denial of Service (REDoS) in httplib2
CVE-2021-23980Medium· 6.1Cross-site scripting in Bleach
Cross-site scripting in Bleach
CVE-2021-21238Medium· 6.5SAML XML Signature wrapping in PySAML2
SAML XML Signature wrapping in PySAML2
CVE-2021-21239Medium· 6.5PoCImproper Verification of Cryptographic Signature in PySAML2
Improper Verification of Cryptographic Signature in PySAML2
CVE-2021-21236High· 7.5Regular Expression Denial of Service in CairoSVG
Regular Expression Denial of Service in CairoSVG
CVE-2020-26263High· 7.5RSA weakness in tslite-ng
RSA weakness in tslite-ng
CVE-2020-26275Medium· 6.1Jupyter Server open redirect vulnerability
Jupyter Server open redirect vulnerability
CVE-2020-26268Medium· 4.4Write to immutable memory region in TensorFlow
Write to immutable memory region in TensorFlow
CVE-2020-26267Medium· 4.4Lack of validation in data format attributes in TensorFlow
Lack of validation in data format attributes in TensorFlow
CVE-2020-26266Medium· 4.4Uninitialized memory access in TensorFlow
Uninitialized memory access in TensorFlow
CVE-2020-26271Medium· 4.4Heap out of bounds access in MakeEdge in TensorFlow
Heap out of bounds access in MakeEdge in TensorFlow
CVE-2020-26270Medium· 4.4CHECK-fail in LSTM with zero-length input in TensorFlow
CHECK-fail in LSTM with zero-length input in TensorFlow
CVE-2020-26257Medium· 6.5Denial of service attack via incorrect parameters in Matrix Synapse
Denial of service attack via incorrect parameters in Matrix Synapse
CVE-2020-26261High· 7.9user-readable api tokens in systemd units for JupyterHub
user-readable api tokens in systemd units for JupyterHub
CVE-2020-26249High· 7.7Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
CVE-2020-26244Medium· 6.8Multiple cryptographic issues in Python oic
Multiple cryptographic issues in Python oic
CVE-2020-29128Critical· 9.8XXE in petl
XXE in petl
CVE-2020-26250Medium· 6.3Base class whitelist configuration ignored in OAuthenticator
Base class whitelist configuration ignored in OAuthenticator
CVE-2020-26243High· 7.5Memory leak in Nanopb
Memory leak in Nanopb
CVE-2020-26232Medium· 4.1Open redirect in Jupyter Server
Open redirect in Jupyter Server
CVE-2020-26890High· 7.5Denial of service attack due to invalid JSON
Denial of service attack due to invalid JSON
CVE-2020-26215Medium· 4.4Open redirect in Jupyter Notebook
Open redirect in Jupyter Notebook
CVE-2020-15266Low· 3.7Float cast overflow undefined behavior
Float cast overflow undefined behavior
CVE-2020-15265Medium· 5.9Segfault in `tf.quantization.quantize_and_dequantize`
Segfault in `tf.quantization.quantize_and_dequantize`
CVE-2020-25074High· 8.8MoinMoin vulnerable to remote code execution via cache action
MoinMoin vulnerable to remote code execution via cache action
CVE-2020-15275High· 8.7malicious SVG attachment causing stored XSS vulnerability
malicious SVG attachment causing stored XSS vulnerability