Vulnerabilities in py-pip