| Package | Affected versions | Patched versions |
|---|---|---|
| pip | < 1.3 | 1.3 |
| pip | < 1.3 | 1.3 |
pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free