{"ecosystem":"pypi","package":"pip","tool_id":"pypi:pip","listed":true,"list_version":"2026-11-05","as_of":"2026-11-05T14:50:46.438Z","version":"26.3","version_source":"registry_latest","security_status":"clear","status_basis":"no_match_on_version","verdict":"insufficient","advisories":{"source":"osv","checked":true,"checked_at":"2026-11-05T14:22:23.792Z","matching_version":0,"other_versions":13,"any_version":13,"malicious_records":0,"exploited_in_wild":0,"list":[{"id":"GHSA-qwm4-qh6w-59xr","kind":"vulnerability","aliases":["CVE-2026-13346","PYSEC-2026-3721"],"affects_version":false,"fixed":["26.2.0","26.2"],"published":"2026-07-29T21:30:59Z","url":"https://osv.dev/vulnerability/GHSA-qwm4-qh6w-59xr"},{"id":"GHSA-wf93-45jw-7689","kind":"vulnerability","aliases":["CVE-2026-8643","PYSEC-2026-196"],"affects_version":false,"fixed":["26.1.2"],"published":"2026-06-01T18:31:53Z","url":"https://osv.dev/vulnerability/GHSA-wf93-45jw-7689"},{"id":"GHSA-jp4c-xjxw-mgf9","kind":"vulnerability","aliases":["CVE-2026-6357","PYSEC-2026-2876"],"affects_version":false,"fixed":["26.1"],"published":"2026-04-27T15:30:52Z","url":"https://osv.dev/vulnerability/GHSA-jp4c-xjxw-mgf9"},{"id":"GHSA-58qw-9mgm-455v","kind":"vulnerability","aliases":["CVE-2026-3219","PYSEC-2026-2875"],"affects_version":false,"fixed":["26.1"],"published":"2026-04-20T18:31:48Z","url":"https://osv.dev/vulnerability/GHSA-58qw-9mgm-455v"},{"id":"GHSA-6vgw-5pg2-w6jp","kind":"vulnerability","aliases":["CVE-2026-1703","PYSEC-2026-1796"],"affects_version":false,"fixed":["26.0"],"published":"2026-02-02T15:30:34Z","url":"https://osv.dev/vulnerability/GHSA-6vgw-5pg2-w6jp"},{"id":"GHSA-4xh5-x5gv-qwph","kind":"vulnerability","aliases":["CVE-2025-8869","PYSEC-2026-1795"],"affects_version":false,"fixed":["25.3"],"published":"2025-09-24T15:31:14Z","url":"https://osv.dev/vulnerability/GHSA-4xh5-x5gv-qwph"},{"id":"GHSA-mq26-g339-26xf","kind":"vulnerability","aliases":["CVE-2023-5752","PYSEC-2023-228"],"affects_version":false,"fixed":["23.3"],"published":"2023-10-25T18:32:26Z","url":"https://osv.dev/vulnerability/GHSA-mq26-g339-26xf"},{"id":"GHSA-53mr-44pp-crf4","kind":"vulnerability","aliases":["CVE-2014-8991","PYSEC-2014-11"],"affects_version":false,"fixed":["6.0"],"published":"2022-05-13T01:11:25Z","url":"https://osv.dev/vulnerability/GHSA-53mr-44pp-crf4"},{"id":"GHSA-5xp3-jfq3-5q8x","kind":"vulnerability","aliases":["CVE-2021-3572","PYSEC-2021-437"],"affects_version":false,"fixed":["21.1"],"published":"2021-11-15T17:45:01Z","url":"https://osv.dev/vulnerability/GHSA-5xp3-jfq3-5q8x"},{"id":"GHSA-c5h8-cq4v-cvfm","kind":"vulnerability","aliases":["CVE-2013-5123","PYSEC-2019-160"],"affects_version":false,"fixed":["1.5"],"published":"2022-05-24T22:01:03Z","url":"https://osv.dev/vulnerability/GHSA-c5h8-cq4v-cvfm"},{"id":"GHSA-gpvv-69j7-gwj8","kind":"vulnerability","aliases":["CVE-2019-20916","PYSEC-2020-173"],"affects_version":false,"fixed":["19.2","a4c735b14a62f9cb864533808ac63936704f2ace"],"published":"2021-06-09T17:35:04Z","url":"https://osv.dev/vulnerability/GHSA-gpvv-69j7-gwj8"},{"id":"GHSA-4gv5-qhvr-36vv","kind":"vulnerability","aliases":["CVE-2013-1888","PYSEC-2013-9"],"affects_version":false,"fixed":["1.3"],"published":"2022-05-13T01:11:25Z","url":"https://osv.dev/vulnerability/GHSA-4gv5-qhvr-36vv"},{"id":"GHSA-g3p5-fjj9-h8gj","kind":"vulnerability","aliases":["CVE-2013-1629","PYSEC-2013-8"],"affects_version":false,"fixed":["1.3"],"published":"2022-05-13T01:11:25Z","url":"https://osv.dev/vulnerability/GHSA-g3p5-fjj9-h8gj"}],"list_url":"https://osv.dev/list?ecosystem=PyPI&q=pip"},"field_reports":{"on_version":0,"outcomes":null,"people":0,"verified_people":0,"forge_score":null,"all_versions":0,"versions_reported":[],"tool_page_url":null},"skill_scan":null,"other_versions_flagged":[],"check":{"tool":"forge_check","mcp_server":"https://theagentforge.io/mcp/public","arguments":{"id":"pypi:pip","version":"26.3"},"rest_url":"https://theagentforge.io/api/v1/check?id=pypi%3Apip&version=26.3","cli":"npx @theagentforge/cli check pypi:pip@26.3"},"sources":{"osv":"https://osv.dev/list?ecosystem=PyPI&q=pip","registry":"https://pypi.org/project/pip/","methodology":"https://theagentforge.io/methodology"},"page_url":"https://theagentforge.io/is-it-safe/pypi/pip","markdown_url":"https://theagentforge.io/is-it-safe/pypi/pip.md"}