diff --git a/pkgs/development/misc/resholve/default.nix b/pkgs/development/misc/resholve/default.nix
index 9f4f1bc85715..a8061d19fe0d 100644
--- a/pkgs/development/misc/resholve/default.nix
+++ b/pkgs/development/misc/resholve/default.nix
@@ -33,8 +33,9 @@ let
     stripIdlelib = true;
     stripTests = true;
     enableOptimizations = false;
-    packageOverrides = prev: final: {
-      setuptools = removeKnownVulnerabilities final.setuptools;
+    packageOverrides = final: prev: {
+      pip = removeKnownVulnerabilities prev.pip;
+      setuptools = removeKnownVulnerabilities prev.setuptools;
     };
   };
   callPackage = lib.callPackageWith (pkgsBuildHost // { python27 = python27'; });
diff --git a/pkgs/development/python2-modules/pip/default.nix b/pkgs/development/python2-modules/pip/default.nix
index e0b6b001cb3e..31383a035c0f 100644
--- a/pkgs/development/python2-modules/pip/default.nix
+++ b/pkgs/development/python2-modules/pip/default.nix
@@ -40,6 +40,9 @@ buildPythonPackage rec {
     description = "PyPA recommended tool for installing Python packages";
     license = with lib.licenses; [ mit ];
     homepage = "https://pip.pypa.io/";
+    knownVulnerabilities = [
+      "CVE-2021-28363"
+    ];
     priority = 10;
   };
 }