3 matches found
GHSA-VXJ4-Q4G9-CRJ7 virtualenv bash activate runs commands from an environment name with a backslash before $
Summary The bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the user's shell each time bash draws the prompt. Affected area...
7.8CVSS6.2AI score0.00155EPSS
SaveExploits0References5
20