aprsd (>=1.5.0, <=1.5.1), ttp-sros-parser (>=0.0.1, <=0.1.4) potentially affected by CVE-2026-102930 via virtualenv (20.2.2)

virtualenv PYPI version 20.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aprsd =1.5.0, =0.0.1, =0.1.4 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

azure-devops-artifacts-helpers (1.0.7) potentially affected by CVE-2026-102930 via virtualenv (20.2.1)

virtualenv PYPI version 20.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers 1.0.7 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

awsegy (0.1.4), azure-devops-artifacts-helpers (>=0.0.1, <=1.0.6) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.1.0)

virtualenv PYPI version 20.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - awsegy 0.1.4 - azure-devops-artifacts-helpers =0.0.1, =1.0.0, =1.0.2 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

chemscad (>=2.0.1.post4, <=2.0.2) potentially affected by CVE-2026-102930 via virtualenv (20.0.31)

virtualenv PYPI version 20.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad =2.0.1.post4, =2.0.2 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

pattooshared (>=0.0.95, <=0.0.120) potentially affected by CVE-2026-102930 via virtualenv (20.0.30)

virtualenv PYPI version 20.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pattooshared =0.0.95, =0.0.120 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

mlproto (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-102930 via virtualenv (20.0.27)

virtualenv PYPI version 20.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - mlproto =0.1.1, =0.2.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

lftools (>=0.31.3, <=0.33.1), nerblackbox (0.0.5) potentially affected by CVE-2026-102930 via virtualenv (20.0.25)

virtualenv PYPI version 20.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - lftools =0.31.3, =0.33.1 - nerblackbox 0.0.5 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

showenv (>=0.1.0, <=2.0.0) potentially affected by CVE-2026-102930 via virtualenv (20.0.23)

virtualenv PYPI version 20.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - showenv =0.1.0, =2.0.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

cateye (>=0.3.4, <=0.3.8), edx-completion (>=0.0.1, <=0.1.1) +4 more potentially affected by CVE-2026-102930 via virtualenv (15.1.0)

virtualenv PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cateye =0.3.4, =0.0.1, =0.5.7, =1.0.0rc1, =1.2.0, =1.7.1 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

debpackager (>=0.1.0, <=0.2.1), scriptworker (0.2.1) +1 more potentially affected by CVE-2026-102930 via virtualenv (15.0.2)

virtualenv PYPI version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - debpackager =0.1.0, =0.2.35, =1.1.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

cloudmesh-client (4.2.6) potentially affected by CVE-2026-102930 via virtualenv (15.0.1)

virtualenv PYPI version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

dcoscli (>=0.1.9, <=0.4.6), python-mu (>=1.0.1, <=1.0.3) +1 more potentially affected by CVE-2026-102930 via virtualenv (13.1.2)

virtualenv PYPI version 13.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.9, =1.0.1, =0.2.23, =0.2.34 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

uranium (>=0.2.8, <=0.2.22) potentially affected by CVE-2026-102930 via virtualenv (13.1.0)

virtualenv PYPI version 13.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - uranium =0.2.8, =0.2.22 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

dcoscli (>=0.1.1, <=0.1.8) potentially affected by CVE-2026-102930 via virtualenv (12.1.1)

virtualenv PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.1, =0.1.8 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

pip-faster (>=1.0.0rc1, <=1.0.0rc6.dev4) potentially affected by CVE-2026-102930 via virtualenv (1.11.6)

virtualenv PYPI version 1.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pip-faster =1.0.0rc1, =1.0.0rc6.dev4 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

downloadwheel runs pip download and hands the result straight to theseeder, with nothing checking the bytes it gets back. The embedded pip andsetuptools wheels carry a BUNDLESHA256 that virtualenv checks on every load,but a wheel fetched over the network for the periodic-update feature or...

PYSEC-2026-4011 Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

downloadwheel runs pip download and hands the result straight to the seeder, with nothing checking the bytes it gets back. The embedded pip and setuptools wheels carry a BUNDLESHA256 that virtualenv checks on every load, but a wheel fetched over the network for the periodic-update feature or the...

bitdust-p2p (>=0.0.2, <=0.0.3), dweather-client (>=1.1.0, <=1.3.0) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.0.21)

virtualenv PYPI version 20.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bitdust-p2p =0.0.2, =1.1.0, =0.2.3, =0.2.5 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

dragg (0.0.0), dragg-gym (0.0.1) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.0.18)

virtualenv PYPI version 20.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dragg 0.0.0 - dragg-gym 0.0.1 - muses-lpdp =0.2.2, =0.4.0rc1590080566 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

middleware-apm (>=0.1.29, <=0.1.37) potentially affected by CVE-2026-102930 via virtualenv (20.0.17)

virtualenv PYPI version 20.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - middleware-apm =0.1.29, =0.1.37 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...