Security
فارسی
All products

Red Hat Enterprise Linux 9/python-pip

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Requests vulnerable to .netrc credentials leak via malicious URLsCVE-2024-47081 · GHSA-9HJG-9R4M-MVJ7Version ranges need review. requestsAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
Denial of service in github.com/shamaton/msgpackCVE-2026-32284 · GHSA-H9Q6-HC68-35RPVersion ranges need review. github.com/shamaton/msgpack/v2github.com/shamaton/msgpack/v3 GoRed Hat High Fix reported
pip would incorrectly handle doubly-encoded package URLs from indexesCVE-2026-13346 · GHSA-QWM4-QH6W-59XRVersion ranges need review. pipRed Hat Enterprise Linux 10/python-pip PyPIRed Hat Medium Fix reported
MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught errorCVE-2026-57585 · GHSA-6V7P-G79W-8964Version ranges need review. msgpackRed Hat Enterprise Linux 9/python-pip PyPIRed Hat High Fix reported
Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fixCVE-2026-45409 · GHSA-65PC-FJ4G-8RJXVersion ranges need review. idnaConfidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 PyPIRed Hat Medium Fix reported
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionCVE-2026-25645 · GHSA-GC5V-M9X4-R6X2Version ranges need review. requestsExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9 PyPIRed Hat Medium Fix reported
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
urllib3's request body not stripped after redirect from 303 status changes request method to GETCVE-2023-45803 · GHSA-G4MX-Q9VG-27P4Version ranges need review. urllib3Red Hat Certification for Red Hat Enterprise Linux 8/redhat-certification-baremetal-container PyPIRed Hat Medium Fix reported
Improper Input Validation in pipCVE-2021-3572 · GHSA-5XP3-JFQ3-5Q8XVersion ranges need review. pipRed Hat Enterprise Linux 7/python-pip PyPIRed Hat High Fix reported