How many pypa pipenv CVEs are in CISA KEV?

None of pypa pipenv's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for pypa pipenv vulnerabilities?

Yes — 1 of pypa pipenv's CVEs have a known public exploit.

Which versions of pypa pipenv are affected?

4 distinct pypa pipenv versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in pypa pipenv CVEs?

pypa pipenv's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation).

What is the average severity of pypa pipenv CVEs?

The average CVSS base score across pypa pipenv's scored CVEs is 8.8.

pypa pipenv Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: pypa pipenv vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

pypa pipenv Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

pypa pipenv has 1 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.8.

Severity and exploitation

How the CVSS severity of pypa pipenv's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of pypa pipenv's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of pypa pipenv's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every pypa pipenv version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 2018.10.9, < 2022.1.81 CVE
2018.10.9 <= v < 2022.1.81 CVE

Fixed in

2022.1.81 CVE
d378b9f91c811c95069cda9369465aae11bf67a41 CVE

Find a version

1 CVE

Sort

Pipenv's requirements.txt parsing allows malicious index url in comments
CVE-2022-21668
Public exploit
Patch
CWE-20
High · CVSS 8.8
EPSS 3.8% (90th pct)2022-01-10

Common weakness types

The CWE weakness categories most often found in pypa pipenv CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation1 CVE

Other pypa products

Browse vulnerabilities for other products by pypa.

pip15 CVEs virtualenv7 CVEs setuptools5 CVEs wheel2 CVEs pypa/setuptools1 CVEs

All pypa vulnerabilities

Frequently asked questions

Common questions about pypa pipenv vulnerabilities.

How many CVEs does pypa pipenv have?: pypa pipenv has 1 published CVE records since 2022.
How many pypa pipenv CVEs are in CISA KEV?: None of pypa pipenv's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for pypa pipenv vulnerabilities?: Yes — 1 of pypa pipenv's CVEs have a known public exploit.
Which versions of pypa pipenv are affected?: 4 distinct pypa pipenv versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in pypa pipenv CVEs?: pypa pipenv's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation).
What is the average severity of pypa pipenv CVEs?: The average CVSS base score across pypa pipenv's scored CVEs is 8.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track pypa pipenv vulnerabilities

Get an alert for each new pypa pipenv CVE, with AI-written analysis and remediation steps.

Create an account See pricing