Known vulnerabilities in python-pip

Known vulnerabilities in python-pip

Vendor: openEuler

Software: python-pip

Software CPE: cpe:2.3:o:openeuler:python-pip:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 17

Public exploits: 2

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU136685 - Insecure Temporary File CVE-2026-25645	CWE-377	Low	No	No	21.3.1-15	02.07.2026	SB2026070223 SB2026070226 SB2026070229 and 18 more
#VU130907 - Exposure of sensitive information to an unauthorized actor CVE-2026-44431	CWE-200	Medium	No	No	20.2.2-19, 21.3.1-18	09.05.2026	SB20260509126 SB2026051588 SB2026051589 and 43 more
#VU123468 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-1703	CWE-22	Low	No	No	21.3.1-14, 23.3.1-9	03.03.2026	SB2026030336 SB2026030337 SB2026030338 and 9 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-21441	CWE-409	Medium	No	No	20.2.2-15, 21.3.1-13, 21.3.1-15, 23.3.1-9	07.01.2026	SB2026010780 SB2026011269 SB2026011328 and 90 more
#VU119230 - Allocation of Resources Without Limits or Throttling CVE-2025-66418	CWE-770	Medium	No	No	20.2.2-14, 21.3.1-13, 23.3.1-7	05.12.2025	SB2025120581 SB2025121208 SB2025121938 and 94 more
#VU118203 - Improper Check for Unusual or Exceptional Conditions CVE-2025-8869	CWE-754	Medium	No	No	20.2.2-13, 20.2.2-14, 20.2.2-15, 21.3.1-12, 21.3.1-13, 21.3.1-14, 23.3.1-7, 23.3.1-9	07.11.2025	SB2025110747 SB2025110755 SB2025112220 and 24 more
#VU111979 - Protection Mechanism Failure CVE-2025-50181	CWE-693	Low	No	No	20.2.2-12, 20.2.2-14, 20.2.2-15, 21.3.1-10, 21.3.1-11, 21.3.1-13, 21.3.1-14, 23.3.1-7, 23.3.1-9	26.06.2025	SB2025062659 SB2025062660 SB2025062662 and 55 more
#VU111716 - Insufficiently Protected Credentials CVE-2024-47081	CWE-522	Medium	No	No	20.2.2-10, 20.2.2-12, 20.2.2-14, 20.2.2-15, 21.3.1-9, 21.3.1-11, 21.3.1-13, 21.3.1-14, 23.3.1-4, 23.3.1-7, 23.3.1-9	21.06.2025	SB2025062111 SB2025062112 SB2025062113 and 96 more
#VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891	CWE-200	Low	No	No	20.2.2-9, 20.2.2-10, 20.2.2-12, 20.2.2-14, 20.2.2-15, 21.3.1-6, 21.3.1-8, 21.3.1-9, 21.3.1-10, 21.3.1-11, 21.3.1-13, 21.3.1-14, 23.3.1-2, 23.3.1-4, 23.3.1-7, 23.3.1-9	19.06.2024	SB2024061955 SB20240625146 SB2024062605 and 194 more
#VU88828 - Resource exhaustion CVE-2024-3651	CWE-400	Medium	No	No	21.3.1-6, 21.3.1-8	19.04.2024	SB2024041905 SB2024041906 SB2024041907 and 112 more
#VU84849 - Command injection CVE-2023-5752	CWE-77	Medium	No	No	20.2.2-19, 21.3.1-18	28.12.2023	SB2023122824 SB2023122825 SB2023122826 and 32 more
#VU82978 - Exposure of sensitive information to an unauthorized actor CVE-2023-45803	CWE-200	Medium	No	No	20.2.2-9, 20.2.2-10, 20.2.2-12, 20.2.2-14, 20.2.2-15, 21.3.1-6, 21.3.1-8, 21.3.1-9, 21.3.1-10, 21.3.1-11, 21.3.1-13, 21.3.1-14, 23.3.1-2, 23.3.1-4, 23.3.1-7, 23.3.1-9	10.11.2023	SB2023111038 SB2023111040 SB2023111048 and 122 more
#VU81322 - Exposure of sensitive information to an unauthorized actor CVE-2023-43804	CWE-200	Low	Available	No	20.2.2-9, 21.3.1-6, 21.3.1-8	02.10.2023	SB2023100251 SB2023100259 SB2023100260 and 112 more
#VU77164 - Exposure of sensitive information to an unauthorized actor CVE-2023-32681	CWE-200	Medium	Available	No	20.2.2-12, 21.3.1-11	12.06.2023	SB2023061224 SB2023061306 SB2023061514 and 114 more
#VU62512 - Improper input validation CVE-2021-3572	CWE-20	Medium	No	No	20.2.2-2, 20.2.2-9, 20.2.2-13, 20.2.2-19, 21.3.1-6, 21.3.1-8, 21.3.1-12, 21.3.1-18, 23.3.1-2	22.04.2022	SB2022042257 SB2022042259 SB2021071390 and 51 more
#VU54077 - Resource exhaustion CVE-2021-33503	CWE-400	Medium	No	No	20.2.2-6	13.06.2021	SB2021061304 SB2021061305 SB2021071501 and 36 more
#VU29544 - Resource exhaustion CVE-2020-14422	CWE-400	Medium	No	No	20.2.2-6	07.07.2020	SB2020070704 SB2020070705 SB2020070710 and 40 more