Tagged “pip”
CVEs tagged pip, newest first.
5541 CVEsRSS
MAL-2026-5282NoneMalicious code in mrbios (PyPI)
Malicious code in mrbios (PyPI)
MAL-2026-5324NoneMalicious code in pyphetools (PyPI)
Malicious code in pyphetools (PyPI)
MAL-2026-5322NoneMalicious code in phenopacket-store-toolkit (PyPI)
Malicious code in phenopacket-store-toolkit (PyPI)
MAL-2026-5316NoneMalicious code in gpsea (PyPI)
Malicious code in gpsea (PyPI)
MAL-2026-5315NoneMalicious code in ensmallen (PyPI)
Malicious code in ensmallen (PyPI)
MAL-2026-5301NoneMalicious code in mflux-streamlit (PyPI)
Malicious code in mflux-streamlit (PyPI)
MAL-2026-5298NoneMalicious code in executor-engine (PyPI)
Malicious code in executor-engine (PyPI)
MAL-2026-5325NoneMalicious code in ray-mcp-server (PyPI)
Malicious code in ray-mcp-server (PyPI)
MAL-2026-5321NoneMalicious code in orchestr8-platform (PyPI)
Malicious code in orchestr8-platform (PyPI)
MAL-2026-5319NoneMalicious code in mem8 (PyPI)
Malicious code in mem8 (PyPI)
MAL-2026-5318NoneMalicious code in langchain-core-mcp (PyPI)
Malicious code in langchain-core-mcp (PyPI)
MAL-2026-5317NoneMalicious code in instructor-mcp (PyPI)
Malicious code in instructor-mcp (PyPI)
MAL-2026-5313NoneMalicious code in dreamgen (PyPI)
Malicious code in dreamgen (PyPI)
MAL-2026-5299NoneMalicious code in pantheon-agents (PyPI)
Malicious code in pantheon-agents (PyPI)
MAL-2026-5285NoneMalicious code in ufish (PyPI)
Malicious code in ufish (PyPI)
MAL-2026-5284NoneMalicious code in synago (PyPI)
Malicious code in synago (PyPI)
MAL-2026-5283NoneMalicious code in okite (PyPI)
Malicious code in okite (PyPI)
MAL-2026-5279NoneMalicious code in uprobe (PyPI)
Malicious code in uprobe (PyPI)
MAL-2026-5277NoneMalicious code in pantheon-toolsets (PyPI)
Malicious code in pantheon-toolsets (PyPI)
MAL-2026-5276NoneMalicious code in nucbox (PyPI)
Malicious code in nucbox (PyPI)
MAL-2026-5275NoneMalicious code in napari-ufish (PyPI)
Malicious code in napari-ufish (PyPI)
CVE-2026-37737Medium· 6.5sanic-cors contains an improper regular expression in the try_match() function
sanic-cors contains an improper regular expression in the try_match() function
CVE-2026-50589Medium· 5.3OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash
OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash
CVE-2026-11312Low· 3.3bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map
bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map
CVE-2026-47715Low· 3.1Bugsink: Issue event views can show an event from another project if its UUID is known
Bugsink: Issue event views can show an event from another project if its UUID is known
CVE-2026-47716Low· 3.1Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known
Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known
CVE-2026-47419High· 8.3praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR
praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR
CVE-2024-24769LowVantage6: No limit on emails sent for password/MFA reset
Vantage6: No limit on emails sent for password/MFA reset
CVE-2026-47728Medium· 4.3Bugsink: Project scoping missing in sourcemap and debug-file lookup
Bugsink: Project scoping missing in sourcemap and debug-file lookup
CVE-2024-27928MediumVantage6: 2FA can be circumvented with hacked email access
Vantage6: 2FA can be circumvented with hacked email access