Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/11 1:53 p.m.8 views

BIT-LIBPYTHON-2024-9287 Virtual environment (venv) activation scripts don't quote paths

A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means that...

7.8CVSS7.1AI score0.00648EPSS
SaveExploits0References13
Rows per page
Query Builder