Fwd: [CVE-2026-13346] pip absolute path traversal during download from malicious package indexes

<p>Posted by Alan Coopersmith on Jul 29</p><a href="https://www.cve.org/CVERecord?id=CVE-2026-13346" rel="nofollow">https://www.cve.org/CVERecord?id=CVE-2026-13346</a> currently shows<br /> all pip versions before 26.2 as affected by this CVE.<br /> <br /> -------- Forwarded Message --------<br /> Subject: [Security-announce][CVE-2026-13346] pip absolute path <br /> traversal during downloa