CVE-2026-113776

The virtualenv tool, used for creating isolated Python environments, is vulnerable to OS Command Injection and Code Injection in versions 20.26.6 through 21.14.2 . The root cause lies in ViaTemplateActivator.instantiate_template(), which replaces placeholders (e.g., __VIRTUAL_NAME__, __VIRTUAL_EN...