VulertSecurity VulertSecurity

Vulnerability Database · Ubuntu · python-pip · Version

python-pip 1.5.4-1

1.5.4-1 is affected by 20 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 6 Medium 9 Low 0 Unrated 4

All python-pip versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

python-pip 1.5.4-1 vulnerabilities

20 vulnerabilities cover python-pip 1.5.4-1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Vulnerability in Certifi and Python Pip Packages: CVE-2023-37920 9.8 critical No fix published 25 Jul 2023
Path Traversal Vulnerability in setuptools Package Allows Arbitrary File Write 8.8 high No fix published 17 May 2025
Remote Code Execution Vulnerability in Python Setuptools Package 8.8 high 1.5.4-1ubuntu4+esm5 15 Jul 2024
Critical Vulnerability in Python Pip: Insecure Package Installation via Extra Index URL 7.8 high No fix published 08 May 2020
Critical Vulnerability in Python Pip and Certifi Packages: CVE-2024-39689 7.5 high No fix published 05 Jul 2024
Denial of Service Vulnerability in Python Packaging Authority (PyPA) Wheel and Pip Packages 7.5 high 1.5.4-1ubuntu4+esm3 23 Dec 2022
Directory Traversal Vulnerability in Python Pip Package: CVE-2019-20916 7.5 high No fix published 04 Sep 2020
CRLF Injection Vulnerability in urllib3 Package 6.5 medium No fix published 30 Sep 2020
Authorization Header Exposure in urllib3 - CVE-2018-25091 6.1 medium No fix published 15 Oct 2023
Critical Vulnerability in Python-Pip: Insecure Tar Extraction Mechanism 5.9 medium No fix published 25 Sep 2025
Critical Vulnerability in urllib3 and python-pip: Cookie Header Leakage Risk 5.9 medium No fix published 04 Oct 2023
Critical Vulnerability in Python Packaging Authority's setuptools: Denial of Service Risk 5.9 medium 1.5.4-1ubuntu4+esm2 23 Dec 2022
Critical Security Flaw in Requests Package: Insecure Certificate Verification 5.6 medium No fix published 20 May 2024
Arbitrary Configuration Injection in Python Pip - CVE-2023-5752 5.5 medium No fix published 25 Oct 2023
Critical Vulnerability in Python Pip and Urllib3: Proxy-Authorization Header Mismanagement 4.4 medium No fix published 17 Jun 2024
Critical Vulnerability in urllib3 and python-pip: HTTP Request Body Exposure on Redirects 4.2 medium No fix published 17 Oct 2023
Critical Regression in python-pip Package: USN-5821-4 Update N/A unrated 1.5.4-1ubuntu4+esm4 02 Mar 2023
Critical Vulnerability in python-pip: Denial of Service Risk Due to Improper Filename Validation N/A unrated 1.5.4-1ubuntu4+esm3 28 Feb 2023
Critical Vulnerability in python-pip: Unicode Separator Handling Flaw N/A unrated 1.5.4-1ubuntu4+esm1 19 May 2022
Denial of Service Vulnerability in Python Pip Package (CVE-2014-8991) N/A unrated No fix published 24 Nov 2014

Looking for another version, or everything Vulert holds for python-pip?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About python-pip 1.5.4-1

Is python-pip 1.5.4-1 vulnerable?

Yes. 20 vulnerabilities in the Vulert database cover python-pip 1.5.4-1: 1 critical, 6 high, 9 medium and 0 low, plus 4 not yet rated. Each entry above names the fixed version to move to.

How do I monitor python-pip for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the python-pip version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.