CVE-2026-3219 pip doesn't reject concatenated ZIP and tar archives Information published. EPSS 0.00 CVE-2026-3219 pip US Microsoft Security · 23. 4. 10:03