https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T04:52:01.925458+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-3572 CVE-2021-3572 2026-10-12T04:52:01.943460+00:00

Affected: python-pip

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.

 https://vulnerability.circl.lu/vuln/usn-4961-2 USN-4961-2 — python-pip vulnerability 2026-10-12T04:52:01.943656+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-pip, Ubuntu:Pro:16.04:LTS: python-pip, Ubuntu:Pro:18.04:LTS: python-pip

USN-4961-1 fixed a vulnerability in pip. This update provides the corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.

Original advisory details:

It was discovered that pip incorrectly handled unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository.