CVE-2026-113723

A flaw was found in virtualenv. This vulnerability allows arbitrary code execution if an attacker can influence the prompt text provided during environment creation. When a user subsequently activates the environment in a bash shell, the unvalidated prompt text is executed as shell syntax, allowi...

CVE-2026-113725

A flaw was found in virtualenv. The bash activation script improperly escapes the virtual environment name when configuring the command prompt. If a user activates a virtual environment created with a specially crafted name, an attacker can achieve arbitrary code execution in the user's shell...

CVE-2026-113722

A flaw was found in virtualenv. Due to improper quoting of interpreter paths when generating script wrappers, an attacker who influences the environment destination path can achieve arbitrary code execution. When a user subsequently executes a generated script launcher, embedded shell commands ar...

CVE-2026-113720

A flaw was found in virtualenv. When creating new environments, cached package files retain their original permissions rather than respecting the current user file-creation mask umask. On shared systems where an environment directory is accessible to other users, a local attacker can modify these...

CVE-2026-113718

A flaw was found in virtualenv. This vulnerability could lead to arbitrary code execution when a user sources a generated xonsh activation script. Under certain multibyte character encodings, improper quoting of non-ASCII directory paths or prompt strings allows quote boundaries to be broken...

CVE-2026-113713

A flaw was found in virtualenv. When configured to link application data through environment variables or configuration files, virtualenv can leave newly created environments linked to temporary package files that are deleted after setup completes. Because the virtual environment references an...

CVE-2026-113869

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled...

CVE-2026-112943

A flaw was found in launch-editor. When running on Windows systems, the package fails to properly escape percent characters when passing arguments to the Windows command shell. If an environment variable contains malicious values, an attacker could exploit this behavior to achieve arbitrary code...

CVE-2026-113679

A flaw was found in HarfBuzz. An attacker can trigger an out-of-bounds write by enticing an application using the experimental WebAssembly Wasm shaper to process a specially crafted font. Due to an incorrect function signature in the glyph string conversion interface, the font's embedded...

sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5

A flaw was found in SQLite. A heap-based buffer overflow exists in the Full-Text Search 5 FTS5 extension during the merging of prefix document lists. An attacker capable of inserting negative row identifiers into a configured table and executing a prefix search query can cause data to be written...

CVE-2026-110858

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution on the host system. The issue occurs because the Remote.pull function inspects only keyword arguments for unsafe command options and fails to validate positional repository reference...

CVE-2025-71436

A flaw was found in raptor2. The library improperly handles language tag lengths when parsing RDF Resource Description Framework documents, truncating lengths that exceed 255 bytes. A remote attacker can exploit this vulnerability by supplying a specially crafted document with an overly long...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient escaping of the VIRTUALENVPROMPT variable in activate.sh, which allows an attacker who controls the virtual environment prompt string to inject arbitrary shell code. When the activation script...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the seed mechanism's console script launcher rewriting logic in pipinvoke.py when a virtual environment is created on POSIX systems with an interpreter path containing spaces. The rewritelaunchers method rewrites...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the quote method in src/virtualenv/activation/xonsh/init.py, which uses repr to encode string literals written into the xonsh activation script. Because repr does not guarantee ASCII-safe output, non-ASCII...

CVE-2026-112094

A flaw was found in mxml. A remote attacker can exploit a use-after-free vulnerability by supplying specially crafted XML input processed by the mxmlloaddata function. This flaw can lead to memory corruption, causing a Denial of Service DoS through an application crash or potentially allowing...

CVE-2026-113709

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point Helm's config and data directories at a repository-controlled location...

CVE-2026-100134

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...