Lucene search
+L

1 matches found

OSV
OSV
added 2025/01/17 3:05 p.m.17 views

BIT-PYTHON-MIN-2024-9287 Virtual environment (venv) activation scripts don't quote paths

A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means that...

7.8CVSS7.2AI score0.00648EPSS
SaveExploits0References13
Rows per page
Query Builder