AZL-50757 CVE-2024-9287 affecting package python3 for versions less than 3.9.19-11
A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means that...