Virtualenv - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-01-10.

Products

• Virtualenv - 3 CVEs

Newest CVEs of Virtualenv

• CVE-2026-22702 - CVSS 4.5 (medium), 2026-01-10: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in…
• CVE-2024-53899 - CVSS 8.4 (high), 2024-11-24: virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly…
• CVE-2013-5123 - CVSS 5.9 (medium), 2019-11-05: The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform…