Python Packaging Authority CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Python Packaging Authority CVE published 2026-06-01

CVE-2026-8643

The CVE-2026-8643 vulnerability in pip allows entry points to be installed outside the installation directory due to improper sanitization of paths. This issue arises from treating console_scripts and gui_scripts as paths rather than file names. The vulnerability has a CVSS score of 4.1 and is classified as MEDIUM severity. Affected product deployments should be identified in managed environments, and own [truncated]