Lucene search
+L

20 matches found

osv_bit
osv_bit
•added 2026/10/29 9:00 a.m.•24 views

BIT-VIRTUALENV-2026-113713 virtualenv: Temporary app-data can leave dangling seed package links

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/29 12:00 a.m.•12 views

PT-2026-132489

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlink app...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/23 10:26 p.m.•19 views

EUVD-2026-105259

virtualenv: Temporary app-data can leave dangling seed package links...

4.4CVSS5.9AI score0.00204EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/10/23 10:26 p.m.•42 views

virtualenv: Temporary app-data can leave dangling seed package links

Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappdata can enable this state even though the command-line flag is disabled for temporary app-data...

4.4CVSS6.2AI score0.00204EPSS
SaveExploits0References6Affected Software1
SUSE CVE
SUSE CVE
•added 2026/10/23 4:28 p.m.•20 views

SUSE CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-113713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References3
Veracode
Veracode
•added 2026/10/22 8:59 a.m.•28 views

Virtualenv: Generated POSIX Console Launchers Interpret Destination Paths As Shell Syntax

Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console launcher. The app-data seeder and pip delegate launcher generation to distlib but supply the interpreter path in a form that does not preserve it as literal data in the shell wrapper...

7.8CVSS6.5AI score0.00285EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/21 9:30 p.m.•24 views

GHSA-C978-59M8-C77V virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console launcher. The app-data seeder and pip delegate launcher generation to distlib but supply the interpreter path in a form that does not preserve it as literal data in the shell wrapper...

7.8CVSS6.5AI score0.00285EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/10/21 9:30 p.m.•47 views

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console launcher. The app-data seeder and pip delegate launcher generation to distlib but supply the interpreter path in a form that does not preserve it as literal data in the shell wrapper...

7.8CVSS6.5AI score0.00285EPSS
SaveExploits0References6Affected Software1
osv_azl
osv_azl
•added 2026/10/20 7:17 p.m.•19 views

AZL-110103 CVE-2026-113713 affecting package python-virtualenv for versions less than 20.36.1-10

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 7:17 p.m.•18 views

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS0.00204EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/10/20 7:17 p.m.•24 views

DEBIAN-CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/20 7:06 p.m.•12 views

CVE-2026-113713 virtualenv: Temporary app-data can leave dangling seed package links

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/20 7:06 p.m.•34 views

CVE-2026-113713 virtualenv: Temporary app-data can leave dangling seed package links

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS0.00204EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/20 7:06 p.m.•23 views

CVE-2026-113713 virtualenv: Temporary app-data can leave dangling seed package links

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/10/20 7:06 p.m.•17 views

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

4.4CVSS6AI score0.00204EPSS
SaveExploits0
Mend
Mend
•added 2026/10/20 7:06 p.m.•22 views

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

5.5CVSS6AI score0.00204EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/20 7:06 p.m.•50 views

CVE-2026-113713

The virtualenv tool, used for creating isolated Python environments, is vulnerable in versions 21.14.8 through 21.14.10 . The app-data seeder can leave an environment linked to temporary package files that are deleted upon completion of the creation process. This occurs because the environment-va...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•23 views

PT-2026-118614

Name of the Vulnerable Software and Affected Versions virtualenv versions 21.14.8 through 21.14.9 Description The app-data seeder may leave an environment linked to temporary package files that are deleted upon completion of the creation process. This state can be triggered via environment-variab...

4.4CVSS5.9AI score0.00204EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2026/10/19 4:00 p.m.•15 views

Python Packaging Authority virtualenv resource management error vulnerability

The Python Packaging Authority’s virtualenv version 21.14.8 to 21.14.10 has a resource management vulnerability. This vulnerability arises from the app-data seeder, which may cause the environment to link to temporary package files that are deleted after creation. This state can be enabled throug...

4.4CVSS6AI score0.00204EPSS
SaveExploits0References4
Rows per page
Query Builder