pip could be made to expose sensitive information over the network.

Source: Ubuntu 25.04 USN-7599-2 important: python-pip information exposure