AVG-2036 log

Package python-pip
Status Fixed
Severity Medium
Type silent downgrade
Affected 20.3.4-4
Fixed 21.0-1
Current 24.0-1 [extra]
Ticket None
Created Fri Jun 4 07:43:56 2021
Issue Severity Remote Type Description
CVE-2021-3572 Medium Yes Silent downgrade
A security issue has been found in pip before version 21.1. Maliciously formatted tags could be used to hijack a commit-based pin. Using the fact that all...