<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: pypi</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-34501: The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.</title><link>https://patchthecve.com/cve/CVE-2022-34501.html</link><guid>https://patchthecve.com/cve/CVE-2022-34501.html</guid><pubDate>Wed, 17 Jun 2026 04:50:27 +0000</pubDate><description>CRITICAL 9.8: The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.</description></item><item><title>CVE-2022-34500: The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.</title><link>https://patchthecve.com/cve/CVE-2022-34500.html</link><guid>https://patchthecve.com/cve/CVE-2022-34500.html</guid><pubDate>Wed, 17 Jun 2026 04:50:27 +0000</pubDate><description>CRITICAL 9.8: The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.</description></item><item><title>CVE-2022-28470: marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.</title><link>https://patchthecve.com/cve/CVE-2022-28470.html</link><guid>https://patchthecve.com/cve/CVE-2022-28470.html</guid><pubDate>Wed, 17 Jun 2026 04:38:34 +0000</pubDate><description>CRITICAL 9.8: marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.</description></item></channel></rss>