CVE-2026-102938

The virtualenv tool, used for creating isolated Python environments, is vulnerable to configuration injection in versions prior to 21.7.11 . The root cause is that PyEnvCfg.write() writes prompt values verbatim to the pyvenv.cfg format, while PyEnvCfg._read_values() parses this file using str.spl...