Red Hat Quay 3/python27-python-pip
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible. | Red Hat Enterprise Linux 7/python-pipRed Hat Enterprise Linux 8/python-pip | Red Hat | Low | No fix reported |