Tagged “pip”
CVEs tagged pip, newest first.
4637 CVEsRSS
MAL-2026-7465NoneMalicious code in quatre (PyPI)
Malicious code in quatre (PyPI)
MAL-2026-7464NoneMalicious code in pygremlinbox-malware-network-indicators (PyPI)
Malicious code in pygremlinbox-malware-network-indicators (PyPI)
MAL-2026-7463NoneMalicious code in pygremlinbox-malware-install-execution (PyPI)
Malicious code in pygremlinbox-malware-install-execution (PyPI)
MAL-2026-7462NoneMalicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
MAL-2026-7461NoneMalicious code in pygremlinbox-malware-credential-harvesting (PyPI)
Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)
MAL-2026-7460NoneMalicious code in pygremlinbox-malware-code-obfuscation (PyPI)
Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
MAL-2026-7459NoneMalicious code in pygremlinbox-malware-c2-beacon (PyPI)
Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
MAL-2026-7458NoneMalicious code in pycryptoshuffle (PyPI)
Malicious code in pycryptoshuffle (PyPI)
MAL-2026-7457NoneMalicious code in piirgg (PyPI)
Malicious code in piirgg (PyPI)
MAL-2026-7456NoneMalicious code in notrandompacketname (PyPI)
Malicious code in notrandompacketname (PyPI)
MAL-2026-7455NoneMalicious code in myproject234 (PyPI)
Malicious code in myproject234 (PyPI)
MAL-2026-7454NoneMalicious code in cyberday26szymon-payments (PyPI)
Malicious code in cyberday26szymon-payments (PyPI)
MAL-2026-7453NoneMalicious code in cyberday26szymon-logging (PyPI)
Malicious code in cyberday26szymon-logging (PyPI)
MAL-2026-7452NoneMalicious code in cyberday26szymon-auth (PyPI)
Malicious code in cyberday26szymon-auth (PyPI)
PYSEC-2026-1075NoneMalicious code in tiktoken-mcp (PyPI)
Malicious code in tiktoken-mcp (PyPI)
PYSEC-2026-1074NoneMalicious code in ray-mcp-server (PyPI)
Malicious code in ray-mcp-server (PyPI)
PYSEC-2026-1073NoneMalicious code in orchestr8-platform (PyPI)
Malicious code in orchestr8-platform (PyPI)
PYSEC-2026-1072NoneMalicious code in openai-mcp (PyPI)
Malicious code in openai-mcp (PyPI)
PYSEC-2026-1071NoneMalicious code in mem8 (PyPI)
Malicious code in mem8 (PyPI)
PYSEC-2026-1070NoneMalicious code in langchain-core-mcp (PyPI)
Malicious code in langchain-core-mcp (PyPI)
PYSEC-2026-1069NoneMalicious code in instructor-mcp (PyPI)
Malicious code in instructor-mcp (PyPI)
PYSEC-2026-1068NoneMalicious code in dreamgen (PyPI)
Malicious code in dreamgen (PyPI)
MAL-2026-6945NoneMalicious code in jsonschemavalidation (PyPI)
Malicious code in jsonschemavalidation (PyPI)
MAL-2026-6929NoneMalicious code in paysafe-sdk (PyPI)
Malicious code in paysafe-sdk (PyPI)
MAL-2026-6928NoneMalicious code in paysafe-payments (PyPI)
Malicious code in paysafe-payments (PyPI)
MAL-2026-6927NoneMalicious code in paysafe-kyc (PyPI)
Malicious code in paysafe-kyc (PyPI)
MAL-2026-6926NoneMalicious code in paysafe-api (PyPI)
Malicious code in paysafe-api (PyPI)
CVE-2026-50127Medium· 5.9Weblate SSRF: outbound URL guard misses some private ranges
Weblate SSRF: outbound URL guard misses some private ranges
GHSA-q855-8rh5-jfgqMedium· 6.5ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
GHSA-f66q-9rf6-8795MediumFlask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion
Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion