Python Packaging Authority virtualenv command injection vulnerability

The Python Packaging Authority’s virtualenv versions prior to 21.14.9 have a command injection vulnerability. This vulnerability stems from the fact that when generating POSIX console scripts, the interpreter path is passed to distlib ScriptMaker without proper referencing. When the path contains...