Debian/python-pip: medium 5.7
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest
Action: Upgrade python-pip to 20.3.4-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20.3.4-2 | - |
Fixed versions
| 20.3.4-2 |
Sources
published · modified · JSON