Python Packaging Authority virtualenv path traversal vulnerability

The Python Packaging Authority identifies a path traversal vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because PipInstall.uninstallpreviousversion accepts metadata from existing seed packages. Additionally, uninstalldist fails to verify whether entries within...