Most recent entries from all

BREW-pypy-CVE-2013-5123 — Improper Authentication in pip

Affected: Homebrew: pypy

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

cnvd-2015-08550

EUVD-2026-107897

fkie_cve-2013-5123

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

GHSA-c5h8-cq4v-cvfm — Improper Authentication in pip

Affected: PyPI: pip

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

gsd-2013-5123

openSUSE-SU-2024:10098-1 — python-pip-8.1.2-1.2 on GA media

python-pip-8.1.2-1.2 on GA media

PYSEC-2019-160

Affected: PyPI: pip

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

SUSE-FU-2021:2130-1 — Feature implementation for python39-pip, python39-setuptools

Feature implementation for python39-pip, python39-setuptools

Withdrawn: UBUNTU-CVE-2013-5123

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: python-pip, Ubuntu:16.04:LTS: python-pip

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.