Provide references for CVE-2018-20225.
Where can I find more information about CVE-2018-20225?
References are available at: https://pip.pypa.io/en/stable/news/, https://cowlicks.website/posts/arbitrary-code-execution-from-pips-extra-index-url.html, https://lists.apache.org/thread.html/rb1adce798445facd032870d644eb39c4baaf9c4a7dd5477d12bb6ab2%40%3Cgithub.arrow.apache.org%3E, https://bugzilla.redhat.com/show_bug.cgi?id=1835736.