Known vulnerabilities in python2-pip

Known vulnerabilities in python2-pip

Vendor: openEuler

Software: python2-pip

Software CPE: cpe:2.3:o:openeuler:python2-pip:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 15

Public exploits: 2

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU158572 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-8643	CWE-22	Low	No	No	20.2.2-20	30.10.2026	SB2026103056 SB2026103057 SB2026103058 and 7 more
#VU130907 - Exposure of sensitive information to an unauthorized actor CVE-2026-44431	CWE-200	Medium	No	No	20.2.2-19	09.05.2026	SB20260509126 SB2026051588 SB2026051589 and 43 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-21441	CWE-409	Medium	No	No	20.2.2-15	07.01.2026	SB2026010780 SB2026011269 SB2026011328 and 90 more
#VU119230 - Allocation of Resources Without Limits or Throttling CVE-2025-66418	CWE-770	Medium	No	No	20.2.2-14	05.12.2025	SB2025120581 SB2025121208 SB2025121938 and 94 more
#VU118203 - Improper Check for Unusual or Exceptional Conditions CVE-2025-8869	CWE-754	Medium	No	No	20.2.2-13, 20.2.2-14, 20.2.2-15	07.11.2025	SB2025110747 SB2025110755 SB2025112220 and 24 more
#VU111979 - Protection Mechanism Failure CVE-2025-50181	CWE-693	Low	No	No	20.2.2-12, 20.2.2-14, 20.2.2-15	26.06.2025	SB2025062659 SB2025062660 SB2025062662 and 55 more
#VU111716 - Insufficiently Protected Credentials CVE-2024-47081	CWE-522	Medium	No	No	20.2.2-10, 20.2.2-12, 20.2.2-14, 20.2.2-15	21.06.2025	SB2025062111 SB2025062112 SB2025062113 and 96 more
#VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891	CWE-200	Low	No	No	20.2.2-9, 20.2.2-10, 20.2.2-12, 20.2.2-14, 20.2.2-15, 20.2.2-20	19.06.2024	SB2024061955 SB20240625146 SB2024062605 and 197 more
#VU84849 - Command injection CVE-2023-5752	CWE-77	Medium	No	No	20.2.2-19	28.12.2023	SB2023122824 SB2023122825 SB2023122826 and 32 more
#VU82978 - Exposure of sensitive information to an unauthorized actor CVE-2023-45803	CWE-200	Medium	No	No	20.2.2-9, 20.2.2-10, 20.2.2-12, 20.2.2-14, 20.2.2-15, 20.2.2-20	10.11.2023	SB2023111038 SB2023111040 SB2023111048 and 125 more
#VU81322 - Exposure of sensitive information to an unauthorized actor CVE-2023-43804	CWE-200	Low	Available	No	20.2.2-9	02.10.2023	SB2023100251 SB2023100259 SB2023100260 and 112 more
#VU77164 - Exposure of sensitive information to an unauthorized actor CVE-2023-32681	CWE-200	Medium	Available	No	20.2.2-12	12.06.2023	SB2023061224 SB2023061306 SB2023061514 and 114 more
#VU62512 - Improper input validation CVE-2021-3572	CWE-20	Medium	No	No	20.2.2-2, 20.2.2-9, 20.2.2-13, 20.2.2-19	22.04.2022	SB2022042257 SB2022042259 SB2021071390 and 51 more
#VU54077 - Resource exhaustion CVE-2021-33503	CWE-400	Medium	No	No	20.2.2-6	13.06.2021	SB2021061304 SB2021061305 SB2021071501 and 36 more
#VU29544 - Resource exhaustion CVE-2020-14422	CWE-400	Medium	No	No	20.2.2-6	07.07.2020	SB2020070704 SB2020070705 SB2020070710 and 40 more