In 2014 the Python packaging tool pip was quietly found to contain a surprisingly low-tech, high-impact local denial‑of‑service (DoS) bug: pip versions 1.3 through 1.5.6 would create build directories in a predictable location under /tmp using a fixed prefix, allowing an unprivileged local user...