How many pypa pip CVEs are in CISA KEV?

None of pypa pip's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for pypa pip vulnerabilities?

Yes — 3 of pypa pip's CVEs have a known public exploit.

Which versions of pypa pip are affected?

189 distinct pypa pip versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in pypa pip CVEs?

pypa pip's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation), CWE-36 (Absolute Path Traversal), CWE-434 (Unrestricted Upload of File with Dangerous Type).

What is the average severity of pypa pip CVEs?

The average CVSS base score across pypa pip's scored CVEs is 5.8.

pypa pip Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: pypa pip vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

pypa pip Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

pypa pip has 15 published CVE records since 2013, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

Severity and exploitation

How the CVSS severity of pypa pip's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High5

Medium8

Low2

In CISA’s Known Exploited Vulnerabilities catalog

None of pypa pip's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of pypa pip's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every pypa pip version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.37 CVEs
0.67 CVEs
0.77 CVEs
0.7.17 CVEs
0.87 CVEs
0.8.27 CVEs
0.8.37 CVEs
1.07 CVEs
1.27 CVEs
10.0.07 CVEs
10.0.17 CVEs
18.07 CVEs
18.1

Common weakness types

The CWE weakness categories most often found in pypa pip CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many pypa pip CVEs were published each year.

2013

2014

2019

2020

2021

2023

2025

Other pypa products

Browse vulnerabilities for other products by pypa.

virtualenv7 CVEs setuptools5 CVEs wheel2 CVEs pipenv1 CVEs pypa/setuptools1 CVEs

All pypa vulnerabilities

Frequently asked questions

Common questions about pypa pip vulnerabilities.

How many CVEs does pypa pip have?: pypa pip has 15 published CVE records since 2013.
How many pypa pip CVEs are in CISA KEV?: None of pypa pip's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for pypa pip vulnerabilities?: Yes — 3 of pypa pip's CVEs have a known public exploit.
Which versions of pypa pip are affected?: 189 distinct pypa pip versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in pypa pip CVEs?: pypa pip's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation), CWE-36 (Absolute Path Traversal), CWE-434 (Unrestricted Upload of File with Dangerous Type).
What is the average severity of pypa pip CVEs?: The average CVSS base score across pypa pip's scored CVEs is 5.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track pypa pip vulnerabilities

Get an alert for each new pypa pip CVE, with AI-written analysis and remediation steps.

Create an account See pricing

pypa pip Vulnerabilities