Red Hat Security Advisory

RHSA-2024:11048

python-virtualenv security update

Released 2024-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2024-36075 CVE-2024-53899 · GHSA-rqc4-2hc7-8c8v

HIGH 72

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01572 Published 2024-11-24 Partial fix · 20.26.6 CWE-78