Red Hat Enterprise Linux 10/ubi10/python-312-minimal
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere | pipExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files | pipLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| pip Path Traversal vulnerability | pipLightspeed Core/lightspeed-core/dataverse-exporter-rhel9 | PyPIRed Hat | Low | Fix reported | |
| pip's fallback tar extraction doesn't check symbolic links point to extraction directory | pipMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-api-rhel9 | PyPIRed Hat | Medium | Fix reported |