Pip maintainers

Products

ProductCVEsExploitedLatest
pip2–Apr 27, 2026

Exploited and recent CVEs

  • CVE-2026-6357 Medium 5.3 pip self-update functionality can import newly installed modules after wheel installation 0.1%
  • CVE-2023-5752 Medium 5.5 Mercurial configuration injectable in repo revision when installing via pip 0.5%