Workflow

Pip

Latest version: v24.0

The latest version of pip with no known security vulnerabilities is . We recommend installing version .

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v24.0 at Feb. 3, 2024
License
MIT (MIT License)

Description

The PyPA recommended tool for installing Python packages.

Resources

Vulnerabilities (11)

See all vulnerabilities
CVE-2015-2296
Affected versions:

<6.1.0

Pip 6.1.0 updates its bundled dependency 'requests' to 2.6.0 t…
CVE-2014-8991
Affected versions:

<6.0

pip before 6.0 is not using a randomized and secure default bu…
CVE-2023-5752
Affected versions:

<23.3

Pip 23.3 includes a fix for CVE-2023-5752: When installing a p…
CVE-2021-3572
Affected versions:

<21.1

A flaw was found in python-pip in the way it handled Unicode s…
CVE-2021-28363
Affected versions:

<21.1

Pip 21.1 updates its dependency 'urllib3' to v1.26.4 due to se…
CVE-2019-20916
Affected versions:

<19.2

Versions of Pip prior to 19.2 are vulnerable to a directory tr…

Versions (138)

See all versions

Has known vulnerabilities

  • 24.0
  • 23.3.2
  • 23.3.1
  • 23.3
  • 23.2.1
  • 23.2
  • 23.1.2
  • 23.1.1
  • 23.1
  • 23.0.1
  • 23.0
  • 22.3.1
  • 22.3
  • 22.2.2
  • 22.2.1
  • 22.2
  • 22.1.2
  • 22.1.1
  • 22.1
  • 22.1b1