Pip maintainers pip

• CVE-2026-6357 Medium 5.3 pip self-update functionality can import newly installed modules after wheel installation 0.1%
• CVE-2023-5752 Medium 5.5 Mercurial configuration injectable in repo revision when installing via pip 0.5%