Workflow

Pip

Latest version: v25.0.1

The latest version of pip with no known security vulnerabilities is 25.0.1. We recommend installing version 25.0.1.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v25.0.1 at Feb. 9, 2025
License
MIT (MIT License)

Description

The PyPA recommended tool for installing Python packages.

Resources

Vulnerabilities (12)

See all vulnerabilities
CVE-2015-2296
Affected versions:

<6.1.0

Pip 6.1.0 updates its bundled dependency 'requests' to 2.6.0 t…
CVE-2014-8991
Affected versions:

<6.0

pip before 6.0 is not using a randomized and secure default bu…
PVE-2025-75180
Affected versions:

<25.0

Pip solves a security vulnerability that previously allowed ma…
CVE-2023-5752
Affected versions:

<23.3

Affected versions of Pip are vulnerable to Command Injection. …
CVE-2018-20225
Affected versions:

<21.1

An issue was discovered in Pip (all versions) because it insta…
CVE-2021-3572
Affected versions:

<21.1

A flaw was found in python-pip in the way it handled Unicode s…

Versions (148)

See all versions

Has known vulnerabilities

  • 25.0.1
  • 25.0
  • 24.3.1
  • 24.3
  • 24.2
  • 24.1.2
  • 24.1.1
  • 24.1
  • 24.1b2
  • 24.1b1
  • 24.0
  • 23.3.2
  • 23.3.1
  • 23.3
  • 23.2.1
  • 23.2
  • 23.1.2
  • 23.1.1
  • 23.1
  • 23.0.1