pip

Everything Patch Observer has reported about pip: 2 stories, newest first. Part of our Vulnerabilities coverage.

Organisations urged to update virtualenv to fix high-severity bash command execution flaw

A flaw in virtualenv allows arbitrary command execution in bash when environment names contain backslashes; version 21.14.7 provides a fix for this high-severity issue.

Oct 21, 2026

Vulnerabilities

aiohttp memory exhaustion flaw forces urgent Python patch upgrades for managed services

A high-severity flaw in aiohttp allows attackers to exhaust server resources via crafted requests, requiring immediate upgrades to version 3.14.4 for all exposed clients.

Oct 19, 2026