VI
Product
virtualenv
22
CVEs
0
On KEV
7.8
Max CVSS
21
New 30D
Severity mix
Critical 0High 11Medium 8Low 3
Watch
Add virtualenv to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102938 | 5.8 | Sep 29 | virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection Affected: < 21.7.11 |
| CVE-2026-113724 | 4.5 | Oct 20 | virtualenv: Deletion recovery can change a symlink target's mode Affected: < 21.14.9 |
| CVE-2026-113721 | 4.5 | Oct 20 | virtualenv: Generated files can follow existing destination links Affected: < 21.14.9 |
| CVE-2026-113719 | 4.5 | Oct 20 | virtualenv: Seed replacement does not contain metadata deletion paths Affected: < 21.14.9 |
| CVE-2026-113716 | 4.5 | Oct 20 | virtualenv: Builtin creation follows linked environment directories Affected: < 21.14.9 |
| CVE-2026-22702 | 4.5 | Jan 10 | virtualenv Has TOCTOU Vulnerabilities in Directory Creation Affected: < 20.36.1 |
| CVE-2026-113720 | 4.4 | Oct 20 | virtualenv: Seeded files retain permissions from an older cache Affected: < 21.14.9 |
| CVE-2026-113713 | 4.4 | Oct 20 | virtualenv: Temporary app-data can leave dangling seed package links Affected: >= 21.14.8, < 21.14.10 |
Showing 8