142 matches found
GHSA-FC2G-4W5P-6WHM virtualenv: Seeded files retain permissions from an older cache
Summary The app-data copy seeder uses shutil.copy, which preserves cached file modes independently of the current umask. A cache populated under permissive permissions can therefore produce files with wider access in later environments. Anthropic's OSS Scanner reported this as ANT-2026-487MH6OW i...
virtualenv: Seeded files retain permissions from an older cache
Summary The app-data copy seeder uses shutil.copy, which preserves cached file modes independently of the current umask. A cache populated under permissive permissions can therefore produce files with wider access in later environments. Anthropic's OSS Scanner reported this as ANT-2026-487MH6OW i...
EUVD-2026-105302
virtualenv: Seeded files retain permissions from an older cache...
DEBIAN-CVE-2026-113720
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
AZL-110118 CVE-2026-113720 affecting package python-virtualenv 20.36.1-6
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
CVE-2026-113720
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
CVE-2026-113720
The virtualenv tool (prior to version 21.14.9 ) contains a vulnerability where the app-data copy seeder uses shutil.copy() to move cached package files into new environments. This causes files to retain source modes from a previous cache, potentially overriding the current run's umask . If the ca...
CVE-2026-113720
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
CVE-2026-113720
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...
PT-2026-118626
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.9 Description The app-data copy seeder uses the shutil.copy function to copy cached package files into new environments. This process causes cached source modes to override the current run's umask a user...
Linux Distros Unpatched Vulnerability : CVE-2026-98744
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: max98363: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain...
CVE-2026-55381
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POST /api/v1/estimates/estimate/convert-to-invoice in ConvertEstimateController authorizes only the caller's create-invoice ability and does...
CLSA-2026-1791832293 zlib: Fix of CVE-2026-76844
CVE-2026-76844: reset strm.nextin and strm.availin in gzwrite when a direct write fails, so a later gzwrite after gzclearerr cannot copy past the input buffer...
CVE-2026-94368: Improper Verification of Cryptographic Signature
A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multicloud Object Gateway. The issue occurs when the service processes S3 presigned URLs using Signature Version 4 SigV4. Due to improper validation, the service fails to reject requests containi...
CVE-2026-24074
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations...
CVE-2026-24074
CVE-2026-24074 is an out-of-bounds write in a Video component on Qualcomm platforms. The root cause is memory corruption that occurs when data with large offset and length values exceeds buffer limits during data copy operations. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low co...