pulsar

This CVE doesn't have an impact on Pulsar 3.0.2 at all.
```❯ docker run --rm -it apachepulsar/pulsar-all:3.0.2 bash -c 'pip3 --version; python3 --version'
pip 22.0.2 from /usr/lib/python3/dist-packages/pip (python 3.10)
Python 3.10.12```
Pulsar doesn't use python-pip at runtime. The upcoming Pulsar 3.2.0 version calls pip in certain cases when using Pulsar Functions written in Python: <https://github.com/apache/pulsar/commit/187e0cf5> . Since that's not released, there's no impact of CVE-2021-3572 for the latest LTS version of Pulsar, version 3.0.2 .
CVE-2021-3572 is fixed since pip version 21.1 . Pulsar 3.0.2 images come with pip version 22.0.2 . That's yet another reason why the CVE doesn't apply to recent Pulsar versions.