Tagged “pip”
CVEs tagged pip, newest first.
4637 CVEsRSS
MAL-2026-10867NoneMalicious code in vantrala (PyPI)
Malicious code in vantrala (PyPI)
MAL-2026-10866NoneMalicious code in nemopush (PyPI)
Malicious code in nemopush (PyPI)
MAL-2026-10865NoneMalicious code in kimitalk (PyPI)
Malicious code in kimitalk (PyPI)
MAL-2026-10864NoneMalicious code in kimichat (PyPI)
Malicious code in kimichat (PyPI)
MAL-2026-10863NoneMalicious code in telebot-bot-run (PyPI)
Malicious code in telebot-bot-run (PyPI)
CVE-2026-59203Medium· 5.3Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
CVE-2026-55514High· 6.5vLLM denial of service via prompt embeds on M-RoPE models
vLLM denial of service via prompt embeds on M-RoPE models
CVE-2026-55798Medium· 4.5Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
CVE-2026-54059High· 7.5Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF f…
Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
CVE-2026-12484High· 7.8Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
MAL-2026-10780NoneMalicious code in data-parser-utils (PyPI)
Malicious code in data-parser-utils (PyPI)
MAL-2026-10917NoneMalicious code in tinkoff-cloud-apis-internal (PyPI)
Malicious code in tinkoff-cloud-apis-internal (PyPI)
MAL-2026-10916NoneMalicious code in python-devplatform-client (PyPI)
Malicious code in python-devplatform-client (PyPI)
MAL-2026-10779Critical⚠ ExploitedMalicious code in mlflow-ui (PyPI)
Malicious code in mlflow-ui (PyPI)
MAL-2026-10915NoneMalicious code in dwh-kafka-client (PyPI)
Malicious code in dwh-kafka-client (PyPI)
MAL-2026-10771NoneMalicious code in trongridme (PyPI)
Malicious code in trongridme (PyPI)
GHSA-mfr4-mq8w-vmg6Medium· 6.6PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
CVE-2026-53598High· 7.5Prompty: Arbitrary file read via file reference expansion
Prompty: Arbitrary file read via file reference expansion
MAL-2026-10770NoneMalicious code in govpkg (PyPI)
Malicious code in govpkg (PyPI)
GHSA-8rqh-vxpr-x77pMedium· 4.3plone.restapi: Stored XSS by spoofing mime type
plone.restapi: Stored XSS by spoofing mime type
MAL-2026-10768NoneMalicious code in trongridev (PyPI)
Malicious code in trongridev (PyPI)
CVE-2026-15925CriticalSnowflake Connector for Python improperly verifies TLS hostnames
Snowflake Connector for Python improperly verifies TLS hostnames
MAL-2026-10760NoneMalicious code in abseil-py (PyPI)
Malicious code in abseil-py (PyPI)
MAL-2026-10759NoneMalicious code in ryry-cli (PyPI)
Malicious code in ryry-cli (PyPI)
MAL-2026-10758NoneMalicious code in mfq-private-encoder (PyPI)
Malicious code in mfq-private-encoder (PyPI)
MAL-2026-10757NoneMalicious code in dde-common (PyPI)
Malicious code in dde-common (PyPI)
MAL-2026-10756NoneMalicious code in darkglitch (PyPI)
Malicious code in darkglitch (PyPI)
MAL-2026-10755NoneMalicious code in captcha-solve-api (PyPI)
Malicious code in captcha-solve-api (PyPI)
MAL-2026-10754NoneMalicious code in airflow-provider-spirit (PyPI)
Malicious code in airflow-provider-spirit (PyPI)
MAL-2026-10753NoneMalicious code in a3s-code (PyPI)
Malicious code in a3s-code (PyPI)