CVE-2026-113723

The virtualenv tool, used for creating isolated Python environments, is vulnerable to OS Command Injection (CWE-78) in versions prior to 21.14.9 . The root cause is that caller-supplied prompt text can be interpreted as executable syntax within the bash activation prompt when using older compatib...