Vendors / Pip maintainers Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Pip maintainers records in CISA KEV No Pip maintainers vulnerabilities are listed in CISA KEV.
Priority LOW 23
pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names.
CVSS 4.0 MEDIUM 5.3· Local · High privileges · User interaction · EPSS 0.00138 · Published 2026-04-27 · Partial fix · 26.1 CWE-829
Open these records in search → All records by CVSS severity
Critical0 High0 Medium1 Low0 No CVSS0