Pip

Latest version: v26.0.1

The latest version of pip with no known security vulnerabilities is 26.0.1. We recommend installing version 26.0.1.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v26.0.1 at Feb. 5, 2026
License
MIT (MIT License)

Description

The PyPA recommended tool for installing Python packages.

Resources

Vulnerabilities (14)

See all vulnerabilities
Affected versions:

<6.1.0

Pip 6.1.0 updates its bundled dependency 'requests' to 2.6.0 t…
Affected versions:

<6.0

pip before 6.0 is not using a randomized and secure default bu…
Affected versions:

<26.0

Affected versions of the pip package are vulnerable to Path Tr…
Affected versions:

<25.2

Affected versions of the pip package are vulnerable to Arbitra…
Affected versions:

<25.0

Pip solves a security vulnerability that previously allowed ma…
Affected versions:

<23.3

Affected versions of Pip are vulnerable to Command Injection. …

Versions (154)

See all versions

Has known vulnerabilities

  • 26.0.1
  • 26.0
  • 25.3
  • 25.2
  • 25.1.1
  • 25.1
  • 25.0.1
  • 25.0
  • 24.3.1
  • 24.3
  • 24.2
  • 24.1.2
  • 24.1.1
  • 24.1
  • 24.1b2
  • 24.1b1
  • 24.0
  • 23.3.2
  • 23.3.1
  • 23.3