14 matches found
BIT-VIRTUALENV-2026-113724 virtualenv: Deletion recovery can change a symlink target's mode
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safedelete deletion error handler responds to a failed removal by reading mode bits with os.lstatpath and applying owner-write permission with os.chmodpath, ..., which follows a symlink. A planted link...
4.5CVSS5.8AI score0.00203EPSS
SaveExploits0References5
20