CVE-2026-8643 - pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-18899 [高危] CVE-2026-18899 - IBM Langflow OSS 1.0.0 through 1.11.1 could allow a r…
• CVE-2026-82286 [高危] CVE-2026-82286 - gpt-crawler through 1.5.1 fails to validate the outpu…
• CVE-2026-82275 [高危] CVE-2026-82275 - Qwen-Agent through 0.0.34 contains a path traversal v…
• CVE-2026-82264 [中危] CVE-2026-82264 - Duplicacy through 3.2.5 contains a path traversal vul…
• CVE-2026-55569 [中危] CVE-2026-55569 - aqua is a declarative command-line version manager wr…
• CVE-2026-55552 [高危] CVE-2026-55552 - Yamcs is a mission control framework. Prior to 5.11.1…
• CVE-2026-82112 [低危] CVE-2026-82112 - A flaw has been found in houtini-ai houtini-lm up to …
• CVE-2026-38093 [低危] CVE-2026-38093 - file_picker (aka flutter_file_picker) for Flutter, al…