showenv (>=0.1.0, <=2.0.0) potentially affected by CVE-2026-102930 via virtualenv (20.0.23)

virtualenv PYPI version 20.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - showenv =0.1.0, =2.0.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

alice-ci (>=0.0.2, <=0.0.9), pickley (3.1.6) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.14.0)

virtualenv PYPI version 20.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - alice-ci =0.0.2, =0.0.9 - pickley 3.1.6 - pytoil 0.29.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

aptos-verify (1.0.4), halludetector (0.0.2) +3 more potentially affected by CVE-2026-102930 via virtualenv (20.24.6)

virtualenv PYPI version 20.24.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aptos-verify 1.0.4 - halludetector 0.0.2 - kit-big-data-to-do-list =1.1.0, =1.2.3, =2.2.1 - pytoil 0.40.0 Source cves: CVE-2026-102930...

titanic-mieuxqaloys (0.1.0) potentially affected by CVE-2026-102930 via virtualenv (20.29.2)

virtualenv PYPI version 20.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - titanic-mieuxqaloys 0.1.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

ezflow (>=0.2.1, <=0.2.4) potentially affected by CVE-2026-102930 via virtualenv (20.5.0)

virtualenv PYPI version 20.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ezflow =0.2.1, =0.2.4 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

aiap-model (0.0.0), getsome (0.1.1) +6 more potentially affected by CVE-2026-102930 via virtualenv (20.13.0)

virtualenv PYPI version 20.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aiap-model 0.0.0 - getsome 0.1.1 - invenio-cli =1.0.4, =0.0.1, =0.0.1, =0.17.0, =1.0.1.dev3, =0.0.1, =0.0.3 Source cves: CVE-2026-102930...

aieng-platform-onboard (>=0.5.0, <=0.7.5), autodocgenerator (>=0.5.1, <=1.6.6.8) +10 more potentially affected by CVE-2026-102930 via virtualenv (20.36.1)

virtualenv PYPI version 20.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aieng-platform-onboard =0.5.0, =0.5.1, =1.1.0.dev20260322010408, =0.0.0, =2.2.9, =0.5.0, =1.0.0, =1.0.0b2, =1.1.0, =1.2.0 - waldiez-runner...

automatic-spike-detection (>=1.0.0b0, <=1.2.4), snraspi-lib (1.0.6) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.24.4)

virtualenv PYPI version 20.24.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - automatic-spike-detection =1.0.0b0, =5.0.0, =5.0.1 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2026-102930 via virtualenv (16.7.12)

virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2026-102930 Source advisory:...

akc-mamba (>=2.0.1, <=2.0.2), pangsitpy (0.0.3) potentially affected by CVE-2026-102930 via virtualenv (16.7.9)

virtualenv PYPI version 16.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - akc-mamba =2.0.1, =2.0.2 - pangsitpy 0.0.3 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

rooster-client (0.0.1) potentially affected by CVE-2026-102938 via virtualenv (20.17.0)

virtualenv PYPI version 20.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - rooster-client 0.0.1 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

delete-branches (1.2.14), delete-workflow-runs (1.2.32) +6 more potentially affected by CVE-2026-102938 via virtualenv (20.35.3)

virtualenv PYPI version 20.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.14 - delete-workflow-runs 1.2.32 - ironoc-pytest-conor-heffron =2.1.7, =2.2.0 - pkg-15903 0.1.100 - pkg-26548 1.3.32 -...

dreamai (>=0.10.0, <=0.12.0), nb-cli (>=1.0.0, <=1.2.4) +5 more potentially affected by CVE-2026-102938 via virtualenv (20.17.1)

virtualenv PYPI version 20.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dreamai =0.10.0, =1.0.0, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

artistools (>=2024.7.4, <=2024.7.4.1), blkmrln (0.1.0) +10 more potentially affected by CVE-2026-102938 via virtualenv (20.26.3)

virtualenv PYPI version 20.26.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - artistools =2024.7.4, =2.0.0, =0.1.0, =0.1.9, =1.0.0, =3.0.0.0a0, =0.2.0, =1.0.0 Source cves: CVE-2026-102938 Source advisory:...

bblib (>=0.1.1, <=3.1.0), beambusters (>=1.0.0, <=3.1.0) +7 more potentially affected by CVE-2026-102938 via virtualenv (20.25.1)

virtualenv PYPI version 20.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bblib =0.1.1, =1.0.0, =1.0.1, =0.8.4, =0.0.2, =0.0.1, =0.7.30, =1.0.0, =1.0.3, =1.0.8 Source cves: CVE-2026-102938 Source advisory:...

calendruparser (0.1.0), edx-repo-tools (0.8.2) +3 more potentially affected by CVE-2026-102938 via virtualenv (20.23.1)

virtualenv PYPI version 20.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - calendruparser 0.1.0 - edx-repo-tools 0.8.2 - engr131-2024 =0.0.1, =0.0.19, =0.1.5, =0.2.0 Source cves: CVE-2026-102938 Source advisory:...

pokpok-sdk (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-102938 via virtualenv (20.29.1)

virtualenv PYPI version 20.29.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pokpok-sdk =0.1.3, =0.1.6 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

GHSA-9H9J-4VRJ-GF7G virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

Summary pyvenv.cfg is a line-based format with no escape syntax. PyEnvCfg.write wrote values verbatim, while PyEnvCfg.readvalues parses the file with str.splitlines. A value containing a line boundary therefore became additional configuration lines, and because reading is last-wins, the injected...

chemscad (2.0.3), pcapprocessor (0.1.0) +3 more potentially affected by CVE-2026-102938 via virtualenv (20.8.1)

virtualenv PYPI version 20.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad 2.0.3 - pcapprocessor 0.1.0 - pickley =3.0.6, =0.0.9, =1.61.0, =1.66.4 Source cves: CVE-2026-102938 Source advisory:...

pattooshared (>=0.0.95, <=0.0.120) potentially affected by CVE-2026-102938 via virtualenv (20.0.30)

virtualenv PYPI version 20.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pattooshared =0.0.95, =0.0.120 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...