- CVE-2025-8869: symlink targets were not validated in the tarfile extraction fallback used on pythons without pep 706 - CVE-2026-1703: wheel extraction could write files into a sibling directory sharing a name prefix with the install directory - CVE-2026-3219: a file that is both a tar and a zip archive was always treated as a zip, causing archive-type confusion - CVE-2026-6357: the self version-update check ran after wheel install and could import a module planted by a just-installed wheel - CVE-2026-8643: entry point script names were treated as paths, letting scripts be installed outside the scripts directory - CVE-2026-13346: doubly-encoded package URL from an index could write files to arbitrary paths on download