Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-5726 State: PUBLISHED Published: 2023-10-24T12:47:12.536Z Last Updated: 2024-09-11T18:53:48.932Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Full screen notification obscured by file open dialog on macOS Description: A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. *Note: This issue only affected macOS operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
15.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1846205 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://www.mozilla.org/security/advisories/mfsa2023-46/ - https://www.mozilla.org/security/advisories/mfsa2023-47/
CVE ID: CVE-2023-5727 State: PUBLISHED Published: 2023-10-24T12:47:13.501Z Last Updated: 2024-09-11T18:47:20.244Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows Description: The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container:
fects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1847180 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://www.mozilla.org/security/advisories/mfsa2023-46/ - https://www.mozilla.org/security/advisories/mfsa2023-47/
CVE ID: CVE-2023-5728 State: PUBLISHED Published: 2023-10-24T12:47:14.295Z Last Updated: 2025-02-13T17:25:46.788Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Improper object tracking during GC in the JavaScript engine could have led to a crash. Description: During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1852729 - https://www.mozilla.org/secur
ISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1852729 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://www.mozilla.org/security/advisories/mfsa2023-46/ - https://www.mozilla.org/security/advisories/mfsa2023-47/ - https://www.debian.org/security/2023/dsa-5535 - https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html - https://www.debian.org/security/2023/dsa-5538 - https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html
CVE ID: CVE-2023-5729 State: PUBLISHED Published: 2023-10-24T12:47:15.116Z Last Updated: 2025-02-13T17:25:47.330Z Vendors: Mozilla Products: Firefox Problem Types: Fullscreen notification dialog could have been obscured by WebAuthn prompts Description: A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1823720 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://security.gentoo
mozilla.org/show_bug.cgi?id=1823720 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-5730 State: PUBLISHED Published: 2023-10-24T12:47:15.951Z Last Updated: 2025-02-13T17:25:47.905Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1 Description: Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
ESR < 115.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1836607%2C1840918%2C1848694%2C1848833%2C1850191%2C1850259%2C1852596%2C1853201%2C1854002%2C1855306%2C1855640%2C1856695 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://www.mozilla.org/security/advisories/mfsa2023-46/ - https://www.mozilla.org/security/advisories/mfsa2023-47/ - https://www.debian.org/security/2023/dsa-5535 - https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html - https://www.debian.org/security/2023/dsa-5538 - https://lists.debian.org/debian-lts-announce/2023/10/msg0004
0037.html - https://www.debian.org/security/2023/dsa-5538 - https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html
CVE ID: CVE-2023-5731 State: PUBLISHED Published: 2023-10-24T12:47:16.806Z Last Updated: 2025-02-13T17:25:48.423Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 119 Description: Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1690111%2C1721904%2C1851803%2C1854068 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://security.gentoo.org/
%2C1721904%2C1851803%2C1854068 - https://www.mozilla.org/security/advisories/mfsa2023-45/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-5732 State: PUBLISHED Published: 2023-10-24T12:47:17.600Z Last Updated: 2025-02-13T17:25:49.005Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Address bar spoofing via bidirectional characters Description: An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1690979 - https://bugzilla.mozilla.org/show_bug.cgi?id=1836962 - https://www.mozilla.org
lla.mozilla.org/show_bug.cgi?id=1690979 - https://bugzilla.mozilla.org/show_bug.cgi?id=1836962 - https://www.mozilla.org/security/advisories/mfsa2023-34/ - https://www.mozilla.org/security/advisories/mfsa2023-46/ - https://www.mozilla.org/security/advisories/mfsa2023-47/ - https://www.debian.org/security/2023/dsa-5535 - https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html - https://www.debian.org/security/2023/dsa-5538 - https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html
CVE ID: CVE-2023-5737 State: PUBLISHED Published: 2023-11-27T16:22:02.521Z Last Updated: 2024-08-02T08:07:32.645Z Vendors: Unknown Products: WordPress Backup & Migration Problem Types: CWE-862 Missing Authorization Description: The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c761c67c-eab8-4e1b-a332-c9a45e22bb13
CVE ID: CVE-2023-5738 State: PUBLISHED Published: 2023-11-27T16:22:04.717Z Last Updated: 2024-08-02T08:07:32.600Z Vendors: Unknown Products: WordPress Backup & Migration Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7f935916-9a1a-40c7-b6d8-efcc46eb8eaf
CVE ID: CVE-2023-5739 State: PUBLISHED Published: 2023-10-31T15:47:40.302Z Last Updated: 2024-09-12T13:45:16.227Z Vendors: HP Inc. Products: HP PC Hardware Diagnostics Windows Description: Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_8128401-8128440-16
CVE ID: CVE-2023-5740 State: PUBLISHED Published: 2023-10-24T13:53:00.649Z Last Updated: 2025-02-05T18:58:22.168Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ninjateam Products: Live Chat with Facebook Messenger Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Live Chat with Facebook Messenger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'messenger' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with c
sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aa32a790-242f-4142-9f4d-e1b2a07045bb?source=cve - https://plugins.trac.wordpress.org/browser/wp-facebook-messenger/trunk/frontend/shortcode.php#L22 - https://plugins.trac.wordpress.org/browser/wp-facebook-messenger/trunk/frontend/shortcode.php#L32
CVE ID: CVE-2023-5741 State: PUBLISHED Published: 2023-11-13T07:31:16.052Z Last Updated: 2025-01-08T21:32:03.419Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: powr Products: Contact Form – Custom Builder, Payment Form, and More Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The POWR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'powr-powr-pack' shortcode in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contribu
zation and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2967eae-82bb-4556-a21a-c5bb6b905c62?source=cve - https://plugins.trac.wordpress.org/browser/powr-pack/trunk/src/pack.php?rev=2821707#L198 - https://plugins.trac.wordpress.org/browser/powr-pack/trunk/src/pack.php?rev=2821707#L201
CVE ID: CVE-2023-5742 State: PUBLISHED Published: 2023-11-22T15:33:22.922Z Last Updated: 2024-08-02T08:07:32.850Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dwusercom Products: EasyRotator for WordPress – Slider Plugin Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The EasyRotator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'easyrotator' shortcode in all versions up to, and including, 1.0.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers w
input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3041e28e-d965-4672-ab10-8b1f3d874f19?source=cve - https://plugins.trac.wordpress.org/browser/easyrotator-for-wordpress/tags/1.0.14/easyrotator.php#L1913
CVE ID: CVE-2023-5743 State: PUBLISHED Published: 2023-11-07T11:01:43.518Z Last Updated: 2025-02-05T18:51:20.934Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: stoatoffear Products: Telephone Number Linker Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Telephone Number Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'telnumlink' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level
output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/06424d9f-0064-4101-b819-688489a18eee?source=cve - https://plugins.trac.wordpress.org/browser/telephone-number-linker/tags/1.2/telnumlinker.php#L34 - https://plugins.trac.wordpress.org/browser/telephone-number-linker/tags/1.2/telnumlinker.php#L36
CVE ID: CVE-2023-5744 State: PUBLISHED Published: 2023-10-24T13:53:01.122Z Last Updated: 2025-02-05T18:58:13.440Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: masterk Products: Very Simple Google Maps Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Very Simple Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vsgmap' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and abov
escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fca7837c-ad24-44ce-b073-7df3f8bc4300?source=cve - https://plugins.trac.wordpress.org/browser/very-simple-google-maps/trunk/very-simple-google-maps.php?rev=2941389#L22 - https://plugins.trac.wordpress.org/changeset/2982539/very-simple-google-maps#file1
CVE ID: CVE-2023-5745 State: PUBLISHED Published: 2023-10-24T13:52:58.188Z Last Updated: 2025-02-05T18:59:18.145Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: richardgabriel Products: Reusable Text Blocks Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Reusable Text Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text-blocks' shortcode in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with author-level and above permissions
on user supplied attributes. This makes it possible for authenticated attackers with author-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0d627ee7-1175-4621-a477-1e9ec2d05eee?source=cve - https://plugins.trac.wordpress.org/browser/reusable-text-blocks/tags/1.5.3/text-blocks.php#L319
CVE ID: CVE-2023-5746 State: PUBLISHED Published: 2023-10-24T07:32:14.184Z Last Updated: 2024-09-12T14:33:52.546Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Camera Firmware Problem Types: CWE-134: Use of Externally-Controlled Format String Description: A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
fected: BC500 and TC500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_11
CVE ID: CVE-2023-5747 State: PUBLISHED Published: 2023-11-13T07:48:16.959Z Last Updated: 2024-08-02T08:07:32.650Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hanwha Vision Co., Ltd. Products: PNV-A6081R Problem Types: CWE-347, CWE-345 Description: Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has released patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and
sed patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and solution." Additional Analyst Notes: - CVE Program Container: References: - https://www.hanwhavision.com/wp-content/uploads/2023/11/Camera-Vulnerability-Report-CVE-2023-5747_20231113.pdf
CVE ID: CVE-2023-5748 State: PUBLISHED Published: 2023-10-24T10:26:59.087Z Last Updated: 2024-09-17T14:18:30.321Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Synology Products: Synology SSL VPN Client Problem Types: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Description: Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/sec
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_12
CVE ID: CVE-2023-5749 State: PUBLISHED Published: 2023-12-11T19:22:41.580Z Last Updated: 2024-08-02T08:07:32.709Z Vendors: Unknown Products: EmbedPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3931daac-3899-4169-8625-4c95fd2adafc
CVE ID: CVE-2023-5750 State: PUBLISHED Published: 2023-12-11T19:22:38.813Z Last Updated: 2024-08-02T08:07:32.676Z Vendors: Unknown Products: EmbedPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the page containing a specific content, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cf323f72-8374-40fe-9e2e-810e46de1ec8
CVE ID: CVE-2023-5751 State: PUBLISHED Published: 2024-06-04T08:54:22.046Z Last Updated: 2024-08-02T08:07:32.848Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control Win (SL), CODESYS Development System V3, CODESYS Edge Gateway for Windows, CODESYS Gateway for Windows, CODESYS HMI (SL) Problem Types: CWE-668 Description: A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-20
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-027 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18354&token=f3e92a942c3a2f90c272a5ded7598c6a0b5f4924&download=
CVE ID: CVE-2023-5752 State: PUBLISHED Published: 2023-10-24T20:56:05.469Z Last Updated: 2025-11-03T17:31:06.982Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Pip maintainers Products: pip Problem Types: CWE-77 Description: When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial. Additional Analyst Notes: - CVE Program
. This vulnerability does not affect users who aren't installing from Mercurial. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pypa/pip/pull/12306 - https://mail.python.org/archives/list/security-announce@python.org/thread/F4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/622OZXWG72ISQPLM5Y57Y
/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/622OZXWG72ISQPLM5Y57YCVIMWHD4C3U/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXUVMJM25PUAZRQZBF54OFVKTY3MINPW/