CVE-2026-1703
2 advisories.
PyPI/pip CVE-2026-1703: low, EPSS 0.44%
pip Path Traversal vulnerability
Action: Upgrade pip to 26.0 or later.
pip install pip==26.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.0 | - |
Fixed versions
| 26.0 |
Sources
- osv: GHSA-6vgw-5pg2-w6jp
- https://nvd.nist.gov/vuln/detail/CVE-2026-1703
- https://github.com/pypa/pip/pull/13777
- https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735
- https://github.com/pypa/pip
- https://mail.python.org/archives/list/security-announce@python.org/thread/WIEA34D4TABF2UNQJAOMXKCICSPBE2DJ
CVE-2026-1703 · published · modified · JSON
PyPI/pip CVE-2026-1703: unknown, EPSS 0.44%
pip Path Traversal vulnerability
Action: Upgrade pip to 26.0 or later.
pip install pip==26.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.0 | - |
Fixed versions
| 26.0 |
Sources
- osv: PYSEC-2026-1796
- https://nvd.nist.gov/vuln/detail/CVE-2026-1703
- https://github.com/pypa/pip/pull/13777
- https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735
- https://github.com/pypa/pip
- https://mail.python.org/archives/list/security-announce@python.org/thread/WIEA34D4TABF2UNQJAOMXKCICSPBE2DJ
- https://pypi.org/project/pip
- https://github.com/advisories/GHSA-6vgw-5pg2-w6jp
CVE-2026-1703 · published · modified · JSON