4,735 CVEs
13 in CISA KEV
pip Vulnerabilities
CVE security advisories and vulnerability history for pip.
4,735
Total CVEs
Published
13
In CISA KEV
Exploited in the wild
1,463
Public exploits
With known exploit
6.7
Avg CVSS
2000–2026
Overview
pip has 4,735 published CVE records since 2000, of which 13 are in CISA's Known Exploited Vulnerabilities catalog and 1,463 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting pip products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.