Known vulnerabilities in python3-pip

Known vulnerabilities in python3-pip

Vendor: OpenAnolis

Software: python3-pip

Software CPE: cpe:2.3:o:openanolis:python3-pip:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 10

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU130907 - Exposure of sensitive information to an unauthorized actor CVE-2026-44431	CWE-200	Medium	No	No	23.3.1-7	09.05.2026	SB20260509126 SB2026051588 SB2026051589 and 43 more
#VU123468 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-1703	CWE-22	Low	No	No	23.3.1-6	03.03.2026	SB2026030336 SB2026030337 SB2026030338 and 8 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-21441	CWE-409	Medium	No	No	23.3.1-8	07.01.2026	SB2026010780 SB2026011269 SB2026011328 and 90 more
#VU119231 - Resource exhaustion CVE-2025-66471	CWE-400	Medium	No	No	23.3.1-6	05.12.2025	SB2025120581 SB2025121208 SB2026011313 and 89 more
#VU119230 - Allocation of Resources Without Limits or Throttling CVE-2025-66418	CWE-770	Medium	No	No	23.3.1-6	05.12.2025	SB2025120581 SB2025121208 SB2025121938 and 94 more
#VU111979 - Protection Mechanism Failure CVE-2025-50181	CWE-693	Low	No	No	23.3.1-3	26.06.2025	SB2025062659 SB2025062660 SB2025062662 and 55 more
#VU111716 - Insufficiently Protected Credentials CVE-2024-47081	CWE-522	Medium	No	No	23.3.1-4	21.06.2025	SB2025062111 SB2025062112 SB2025062113 and 96 more
#VU93014 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2001-1267	CWE-22	High	No	No	9.0.3-23.0.1	21.06.2024	SB2001071201 SB2024062139 SB2024110188 and 8 more
#VU84849 - Command injection CVE-2023-5752	CWE-77	Medium	No	No	23.3.1-1	28.12.2023	SB2023122824 SB2023122825 SB2023122826 and 32 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2007-4559	CWE-22	High	Available	No	9.0.3-23.0.1	22.09.2022	SB2007082801 SB2022120206 SB2023060825 and 68 more