CVE-2026-113722

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer...

CVE-2026-113722 virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer...

CVE-2026-113722

The virtualenv tool (prior to version 21.14.9 ) is vulnerable to OS Command Injection (CWE-78) during the generation of POSIX console scripts. The issue occurs because ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker . When a destination path contains ...

EUVD-2026-105304

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer...