1 matches found
virtualenv: Generated files can follow existing destination links
Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environment. The template writer tests exists before unlinking, which misses dangling symlinks; the configuration writer opens the existing path directly. Anthropic's OSS Scanner reported...
4.5CVSS6AI score0.00117EPSS
SaveExploits0References6Affected Software1
20