GHSA-53mr-44pp-crf4MediumCVSS 6.2

pip lack of randomness in build directory

Published
May 13, 2022
Last Modified
October 9, 2024

🔗 CVE IDs covered (1)

CVE-2014-8991 →

📋 Description

pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.

🎯 Affected products1

  • pip/pip:>= 1.3, < 6.0

🔗 References (9)