Most recent entries from all

BREW-pypy-CVE-2013-5123 — Improper Authentication in pip

2026-10-03T08:36:02.293351+00:00

Affected: Homebrew: pypy

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

cnvd-2015-08550

2026-10-03T08:36:02.293410+00:00

cnvd-2015-08550

EUVD-2026-107897

2026-10-03T08:36:02.293428+00:00

EUVD-2026-107897

fkie_cve-2013-5123

2026-10-03T08:36:02.293440+00:00

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

GHSA-c5h8-cq4v-cvfm — Improper Authentication in pip

2026-10-03T08:36:02.293461+00:00

Affected: PyPI: pip

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

gsd-2013-5123

2026-10-03T08:36:02.293481+00:00

gsd-2013-5123

openSUSE-SU-2024:10098-1 — python-pip-8.1.2-1.2 on GA media

2026-10-03T08:36:02.293492+00:00

python-pip-8.1.2-1.2 on GA media

PYSEC-2019-160

2026-10-03T08:36:02.293510+00:00

Affected: PyPI: pip

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

SUSE-FU-2021:2130-1 — Feature implementation for python39-pip, python39-setuptools

2026-10-03T08:36:02.293528+00:00

Feature implementation for python39-pip, python39-setuptools

Withdrawn: UBUNTU-CVE-2013-5123

2026-10-03T08:36:02.293544+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: python-pip, Ubuntu:16.04:LTS: python-pip

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.