CVE-2026-113732

The virtualenv tool for creating isolated Python environments is vulnerable to command injection in versions prior to 21.14.2 . The issue exists because FishActivator inherits ViaTemplateActivator.quote(), which incorrectly uses POSIX shlex.quote() for Fish shell environments. Because Fish handle...