Python

pip

Latest version: v23.1.2

The latest version of pip with no known security vulnerabilities is 23.1.2. We recommend installing version 23.1.2.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v23.1.2 at April 26, 2023
License
MIT (MIT License)

Description

The PyPA recommended tool for installing Python packages.

Resources

Vulnerabilities (9)

See all vulnerabilities
CVE-2015-2296
Affected versions:

<6.1.0

Pip 6.1.0 updates its bundled dependency 'requests' to 2.6.0 t…
CVE-2014-8991
Affected versions:

<6.0

pip before 6.0 is not using a randomized and secure default bu…
CVE-2021-28363
Affected versions:

<21.1

Pip 21.1 updates its dependency 'urllib3' to v1.26.4 due to se…
CVE-2021-3572
Affected versions:

<21.1

A flaw was found in python-pip in the way it handled Unicode s…
CVE-2019-20916
Affected versions:

<19.2

Pip before 19.2 allows Directory Traversal when a URL is given…
CVE-2013-5123
Affected versions:

<1.5

The mirroring support (-M, --use-mirrors) in Python Pip before…

Versions (132)

See all versions

Has known vulnerabilities

  • 23.1.2
  • 23.1.1
  • 23.1
  • 23.0.1
  • 23.0
  • 22.3.1
  • 22.3
  • 22.2.2
  • 22.2.1
  • 22.2
  • 22.1.2
  • 22.1.1
  • 22.1
  • 22.1b1
  • 22.0.4
  • 22.0.3
  • 22.0.2
  • 22.0.1
  • 22.0
  • 21.3.1