Debian/python-pip: medium 5.7
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest
Action: Upgrade python-pip to 20.3.4-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20.3.4-2 | - |
Fixed versions
| 20.3.4-2 |
Sources
- osv: DEBIAN-CVE-2021-3572#Debian:14/python-pip
- https://security-tracker.debian.org/tracker/CVE-2021-3572
published · modified · JSON