Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the onerror handler in src/virtualenv/util/path/sync.py, which previously called os.chmod on a path without first checking whether it is a symbolic link. On Windows, when a read-only file cannot be deleted during a tr...