https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-10T11:44:21.701222+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2013-1629 CVE-2013-1629 2026-10-10T11:44:21.754313+00:00

pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.

 https://db.gcve.eu/vuln/ghsa-g3p5-fjj9-h8gj GHSA-g3p5-fjj9-h8gj — Improper Input Validation in pip 2026-10-10T11:44:21.754416+00:00

Affected: PyPI: pip

pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.

 https://db.gcve.eu/vuln/pysec-2013-8 PYSEC-2013-8 2026-10-10T11:44:21.754454+00:00

Affected: PyPI: pip

pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.