Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-p58f-9548-mpm2
  • PyPI/virtualenv
 virtualenv bash and fish activation scripts execute commands embedded in paths 01 Oct
  • Fix available
  • Severity - 7.8 (High)
GHSA-x78j-v8h9-3j2q
  • PyPI/virtualenv
 virtualenv: Command injection via --prompt in activate.bat (batch activator) 01 Oct
  • Fix available
  • Severity - 7.3 (High)
GHSA-94p9-xgh2-xp45
  • PyPI/virtualenv
 virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use 30 Sep
  • Fix available
  • Severity - 7.7 (High)
GHSA-9h9j-4vrj-gf7g
  • PyPI/virtualenv
 virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection 30 Sep
  • Fix available
  • Severity - 5.8 (Medium)
PYSEC-2026-4013
  • PyPI/virtualenv
 virtualenv bash and fish activation scripts execute commands embedded in paths 18 Sep
  • Fix available
  • Severity - 7.8 (High)
PYSEC-2026-4011
  • PyPI/virtualenv
 Downloaded seed wheels (pip/setuptools) are not integrity-checked before use 18 Sep
  • Fix available
PYSEC-2026-4014
  • PyPI/virtualenv
 Command injection via --prompt in activate.bat (batch activator) 18 Sep
  • Fix available
PYSEC-2026-4012
  • PyPI/virtualenv
 virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection 17 Sep
  • Fix available
PYSEC-2026-2009
  • PyPI/virtualenv
 virtualenv Has TOCTOU Vulnerabilities in Directory Creation 07 Jul
  • Fix available
  • Severity - 4.5 (Medium)
GHSA-597g-3phw-6986
  • PyPI/virtualenv
 virtualenv Has TOCTOU Vulnerabilities in Directory Creation 13 Jan
  • Fix available
  • Severity - 4.5 (Medium)
GHSA-rqc4-2hc7-8c8v
  • PyPI/virtualenv
 virtualenv allows command injection through activation scripts for a virtual environment 24 Nov 2024
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2024-187
  • PyPI/virtualenv
 See record for full details 24 Nov 2024
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-3jhc-wjqf-5f2c
  • PyPI/virtualenv
 Virtualenv Allows Symlink Attack on /tmp/ 17 May 2022
  • Fix available
  • Severity - 6.9 (Medium)
PYSEC-2011-23
  • PyPI/virtualenv
 See record for full details 31 Dec 2011
  • Fix available