Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient escaping of the VIRTUALENVPROMPT variable in activate.sh, which allows an attacker who controls the virtual environment prompt string to inject arbitrary shell code. When the activation script...