PyPI/pip CVE-2026-1703: low 2, EPSS 0.44%

pip Path Traversal vulnerability

Action: Upgrade pip to 26.0 or later.

pip install pip==26.0

Affected

Fixed versions

Sources

• osv: GHSA-6vgw-5pg2-w6jp
• nvd: CVE-2026-1703
• https://github.com/pypa/pip/pull/13777
• https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735
• https://github.com/pypa/pip
• https://mail.python.org/archives/list/security-announce@python.org/thread/WIEA34D4TABF2UNQJAOMXKCICSPBE2DJ

CVE-2026-1703 · published 2026-02-02T15:30:34Z · modified 2026-09-10T03:50:34.266257578Z · JSON