Python pip Console and GUI Script Path Traversal Vulnerability

A vulnerability in Python's pip package manager allows console_scripts and gui_scripts to be treated as paths rather than filenames. This issue arises because pip does not properly sanitize the resolved absolute path to the installation directory. As a result, entry points can be installed outside the intended installation directory.

Impact

Exploitation of this vulnerability can lead to entry points being installed in unintended locations, potentially causing conflicts or unexpected behavior when executing scripts.