← All credits
Gregory P. Smith (https://github.com/gpshead)
5 vulnerability records and advisories credit this contributor.
CVE-2026-8643
pip can extract console_scripts and gui_scripts outside installation directory
CVE-2026-15308
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
CVE-2026-7210
The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection
CVE-2026-8328
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
CVE-2026-7774
tarfile.data_filter path traversal bypass allows writing outside the extraction directory