PyPI/pip CVE-2021-3572: unknown, EPSS 1.83%
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest
Action: Upgrade pip to 21.1 or later.
pip install pip==21.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 21.1 | - |
Fixed versions
| 21.1 |
Sources
- osv: PYSEC-2021-437
- https://bugzilla.redhat.com/show_bug.cgi?id=1962856
- https://github.com/advisories/GHSA-5xp3-jfq3-5q8x
CVE-2021-3572 · published · modified · JSON