TI-2026-18229 CVE-2026-22702 · GHSA-597g-3phw-6986
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Priority LOW 20
virtualenv is a tool for creating isolated virtual python environments.
Vulnerabilities
3 records
TI-2024-36075 CVE-2024-53899 · GHSA-rqc4-2hc7-8c8v
virtualenv before 20.26.6 allows command injection through the activation scripts for a…
Priority HIGH 72
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment.
TI-2013-04447 CVE-2013-5123 · GHSA-c5h8-cq4v-cvfm
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS…
Priority LOW 37
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.