cbcvebase.

Pip Maintainers Pip vulnerabilities

1 known vulnerability affecting pip_maintainers/pip.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2026-6357P4MEDIUMCVSS 5.3fixed in 26.12026-04-27
CVE-2026-6357 [MEDIUM] CWE-829 CVE-2026-6357: pip prior to version 26.1 would run self-update check functionality after installing wheel files whi pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed mo
nvd
Pip Maintainers Pip vulnerabilities | cvebase