Workflow

Pip

Latest version: v24.3.1

The latest version of pip with no known security vulnerabilities is 24.3.1. We recommend installing version 24.3.1.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v24.3.1 at Oct. 27, 2024
License
MIT (MIT License)

Description

The PyPA recommended tool for installing Python packages.

Resources

Vulnerabilities (11)

See all vulnerabilities
CVE-2015-2296
Affected versions:

<6.1.0

Pip 6.1.0 updates its bundled dependency 'requests' to 2.6.0 t…
CVE-2014-8991
Affected versions:

<6.0

pip before 6.0 is not using a randomized and secure default bu…
CVE-2023-5752
Affected versions:

<23.3

Affected versions of Pip are vulnerable to Command Injection. …
CVE-2018-20225
Affected versions:

<21.1

An issue was discovered in Pip (all versions) because it insta…
CVE-2021-3572
Affected versions:

<21.1

A flaw was found in python-pip in the way it handled Unicode s…
CVE-2021-28363
Affected versions:

<21.1

Pip 21.1 updates its dependency 'urllib3' to v1.26.4 due to se…

Versions (146)

See all versions

Has known vulnerabilities

  • 24.3.1
  • 24.3
  • 24.2
  • 24.1.2
  • 24.1.1
  • 24.1
  • 24.1b2
  • 24.1b1
  • 24.0
  • 23.3.2
  • 23.3.1
  • 23.3
  • 23.2.1
  • 23.2
  • 23.1.2
  • 23.1.1
  • 23.1
  • 23.0.1
  • 23.0
  • 22.3.1