Red Hat Software Collections/rh-python36-python-pip
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Exposure of Sensitive Information to an Unauthorized Actor in urllib3 | urllib3Red Hat Enterprise Linux 6/python-urllib3 | PyPIRed Hat | Critical | Fix reported | |
| Improper Neutralization of CRLF Sequences in urllib3 library for Python | urllib3Red Hat Enterprise Linux 6/python-urllib3 | PyPIRed Hat | Medium | Fix reported | |
| Insufficiently Protected Credentials in Requests | requestsRed Hat Enterprise Linux 6/python-requests | PyPIRed Hat | High | Fix reported | |
| python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible. | Red Hat Enterprise Linux 7/python-pipRed Hat Enterprise Linux 8/python-pip | Red Hat | Low | No fix reported |