aprsd (>=1.5.0, <=1.5.1), ttp-sros-parser (>=0.0.1, <=0.1.4) potentially affected by CVE-2026-102925 via virtualenv (20.2.2)

virtualenv PYPI version 20.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aprsd =1.5.0, =0.0.1, =0.1.4 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

pokpok-sdk (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-102925 via virtualenv (20.29.1)

virtualenv PYPI version 20.29.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pokpok-sdk =0.1.3, =0.1.6 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

pad-final-project (>=0.1.3, <=0.1.7), ppmanager (>=0.1.2, <=0.4.0) potentially affected by CVE-2026-102925 via virtualenv (20.28.0)

virtualenv PYPI version 20.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pad-final-project =0.1.3, =0.1.2, =0.4.0 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

aieng-platform-onboard (>=0.5.0, <=0.7.5), autodocgenerator (>=0.5.1, <=1.6.6.8) +10 more potentially affected by CVE-2026-102925 via virtualenv (20.36.1)

virtualenv PYPI version 20.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aieng-platform-onboard =0.5.0, =0.5.1, =1.1.0.dev20260322010408, =0.0.0, =2.2.9, =0.5.0, =1.0.0, =1.0.0b2, =1.1.0, =1.2.0 - waldiez-runner...

virtualenv bash and fish activation scripts execute commands embedded in paths

Impact The generated activate bash/zsh and activate.fish scripts interpolate a shlex.quote-ed value into a position that quotes it a second time. The extra quotes terminate the quoted run early and leave part of the value parsed as shell code, so a path containing shell metacharacters runs comman...

alice-ci (>=0.0.2, <=0.0.9), pickley (3.1.6) +1 more potentially affected by CVE-2026-102925 via virtualenv (20.14.0)

virtualenv PYPI version 20.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - alice-ci =0.0.2, =0.0.9 - pickley 3.1.6 - pytoil 0.29.0 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

doopass (>=2.7.0, <=2.9.0), dran2 (>=0.0.5, <=0.0.6) +6 more potentially affected by CVE-2026-102925 via virtualenv (20.26.2)

virtualenv PYPI version 20.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - doopass =2.7.0, =0.0.5, =1.0.1, =1.0.0, =0.1.4, =0.1.0, =0.2.0 - openpy-ts-clu 0.1.0 Source cves: CVE-2026-102925 Source advisory:...

mlproto (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-102925 via virtualenv (20.0.27)

virtualenv PYPI version 20.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - mlproto =0.1.1, =0.2.0 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102925 via virtualenv (>=21.1.0, <=21.7.4)

virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

bitdust-p2p (>=0.0.2, <=0.0.3), dweather-client (>=1.1.0, <=1.3.0) +1 more potentially affected by CVE-2026-102925 via virtualenv (20.0.21)

virtualenv PYPI version 20.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bitdust-p2p =0.0.2, =1.1.0, =0.2.3, =0.2.5 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

ezflow (>=0.2.1, <=0.2.4) potentially affected by CVE-2026-102925 via virtualenv (20.5.0)

virtualenv PYPI version 20.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ezflow =0.2.1, =0.2.4 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

artistools (>=2024.7.4, <=2024.7.4.1), blkmrln (0.1.0) +10 more potentially affected by CVE-2026-102925 via virtualenv (20.26.3)

virtualenv PYPI version 20.26.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - artistools =2024.7.4, =2.0.0, =0.1.0, =0.1.9, =1.0.0, =3.0.0.0a0, =0.2.0, =1.0.0 Source cves: CVE-2026-102925 Source advisory:...

ersilia (>=0.1.0, <=0.1.1), pytoil (0.34.0) +1 more potentially affected by CVE-2026-102925 via virtualenv (20.15.1)

virtualenv PYPI version 20.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ersilia =0.1.0, =0.0.4, =0.0.7 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

python-webex-bot (0.51.0) potentially affected by CVE-2026-102925 via virtualenv (16.4.3)

virtualenv PYPI version 16.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - python-webex-bot 0.51.0 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

aibro (>=1.0.9, <=1.1.5), cospy (>=0.4.0, <=0.4.2) potentially affected by CVE-2026-102925 via virtualenv (20.4.6)

virtualenv PYPI version 20.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aibro =1.0.9, =0.4.0, =0.4.2 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

lftools (>=0.31.3, <=0.33.1), nerblackbox (0.0.5) potentially affected by CVE-2026-102925 via virtualenv (20.0.25)

virtualenv PYPI version 20.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - lftools =0.31.3, =0.33.1 - nerblackbox 0.0.5 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

ddwrt-tracker (>=0.0.1.dev33, <=0.0.1.dev34), dokos-cli (>=2.0.0, <=2.1.0) +3 more potentially affected by CVE-2026-102925 via virtualenv (16.6.0)

virtualenv PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ddwrt-tracker =0.0.1.dev33, =2.0.0, =5.0.0, =0.0.0, =0.0.0, =1.9.1 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102925 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

ciscoconfparse (>=1.6.53, <=1.7.3), pytoil (0.37.0) potentially affected by CVE-2026-102925 via virtualenv (20.16.7)

virtualenv PYPI version 20.16.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ciscoconfparse =1.6.53, =1.7.3 - pytoil 0.37.0 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

create-fastapi (>=0.0.1, <=0.0.11), questionbankgenerator (1.0.0) potentially affected by CVE-2026-102925 via virtualenv (20.24.7)

virtualenv PYPI version 20.24.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - create-fastapi =0.0.1, =0.0.11 - questionbankgenerator 1.0.0 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...