CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.

• CWE-20

• https://bugzilla.redhat.com/show_bug.cgi?id=1962856Issue Tracking, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240621-0006/
• https://www.oracle.com/security-alerts/cpuapr2022.htmlPatch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1962856Issue Tracking, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240621-0006/
• https://www.oracle.com/security-alerts/cpuapr2022.htmlPatch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory

Published

Nov 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35686Vulnerability in the Oracle Financial Services Analytical Ap…4.3
• CVE-2021-35687Vulnerability in the Oracle Financial Services Analytical Ap…5.3
• CVE-2021-35689A potential vulnerability in the Oracle Talent Acquisition C…9.8
• CVE-2021-3569A stack corruption bug was found in libtpms in versions befo…5.5
• CVE-2021-3570A flaw was found in the ptp4l program of the linuxptp packag…8.8
• CVE-2021-3571A flaw was found in the ptp4l program of the linuxptp packag…7.1
• CVE-2021-3573A use-after-free in function hci_sock_bound_ioctl() of the L…6.4
• CVE-2021-3574A vulnerability was found in ImageMagick-7.0.11-5, where exe…3.3
• CVE-2021-3575A heap-based buffer overflow was found in openjpeg in color.…7.8
• CVE-2021-3576Execution with Unnecessary Privileges vulnerability in Bitde…7.8
• CVE-2021-3577An unauthenticated remote code execution vulnerability was r…8.8
• CVE-2021-3578A flaw was found in mbsync before v1.3.6 and v1.4.2, where a…7.8