5.6Media
Possible to hijack modules in current working directory
Python Software Foundation pymanager
pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current working directory. As a result, if a user executes a pymanager-generated command (e.g., pip, pytest) from an attacker-controlled director…