{"id":"ROOT-OS-UBUNTU-2204-CVE-2025-66418","summary":"CVE-2025-66418 in python-pip - Patched by Root","details":"Root has patched CVE-2025-66418 in the python-pip package for Root:Ubuntu:22.04. Multiple fixed versions available.","modified":"2026-10-01T10:15:03.833576128Z","published":"2026-03-10T12:16:42Z","upstream":["CVE-2025-66418"],"database_specific":{"severity":"HIGH","source":"Root","distro":"ubuntu","distro_version":"22.04"},"affected":[{"package":{"name":"python-pip","ecosystem":"Root:Ubuntu:22.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.root.io.8"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.root.io.7"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.aikido.10"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.aikido.9"}]}],"database_specific":{"upstream_version":"22.0.2+dfsg-1ubuntu0.7","all_fixed_versions":["22.0.2+dfsg-1ubuntu0.7.root.io.8","22.0.2+dfsg-1ubuntu0.7.root.io.7","22.0.2+dfsg-1ubuntu0.7.aikido.10","22.0.2+dfsg-1ubuntu0.7.aikido.9"],"root_patch_version":"root.io.8","root_patched":true,"total_fixed_versions":4,"source":"https://api.root.io/external/osv/ROOT-OS-UBUNTU-2204-CVE-2025-66418.json"}},{"package":{"name":"rootio-python-pip","ecosystem":"Root:Ubuntu:22.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.root.io.8"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.root.io.7"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.aikido.10"},{"fixed":"22.0.2+dfsg-1ubuntu0.7.aikido.9"}]}],"database_specific":{"root_patch_version":"root.io.8","root_patched":true,"total_fixed_versions":4,"source":"https://api.root.io/external/osv/ROOT-OS-UBUNTU-2204-CVE-2025-66418.json","upstream_version":"22.0.2+dfsg-1ubuntu0.7","all_fixed_versions":["22.0.2+dfsg-1ubuntu0.7.root.io.8","22.0.2+dfsg-1ubuntu0.7.root.io.7","22.0.2+dfsg-1ubuntu0.7.aikido.10","22.0.2+dfsg-1ubuntu0.7.aikido.9"]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}