CVE-2026-8643 pip can extract console_scripts and gui_scripts outside installation directory Information published. EPSS 0.00 CVE-2026-8643 pip US Microsoft Security · 4. 6. 10:01