Vulnerabilities in Python Packaging Authority

5 results

Vexday analysis

A Python Packaging Authority apresenta 4 vulnerabilidades catalogadas, todas de severidade moderada ou inferior, com nenhuma sob ataque ativo confirmado. A fraqueza dominante é CWE-22 (Path Traversal), padrão de risco em ferramentas de empacotamento, com uma vulnerabilidade nova publicada nos últimos 90 dias que merece monitoramento.

CVE-2025-8869MEDIUMFallback tar extraction in pip doesn't check symbolic links point to extraction directoryEPSS 0.4%CVE-2026-1703LOWLimited path traversal when installing wheel archivesEPSS 0.4%CVE-2026-13346MEDIUMpip absolute path traversal during download from malicious package indexesEPSS 0.3%CVE-2026-8643MEDIUMpip can extract console_scripts and gui_scripts outside installation directoryEPSS 0.3%CVE-2026-3219MEDIUMpip doesn't reject concatenated ZIP and tar archivesEPSS 0.1%