CVE-2026-113724

The virtualenv tool, used for creating isolated Python environments, is vulnerable to a symlink-following issue in versions prior to 21.14.9 . The safe_delete() deletion error handler uses os.lstat(path) to read mode bits and os.chmod(path, ...) to apply owner-write permissions. Because these ope...