CVE-2026-113717

A flaw was found in virtualenv. When creating an environment using the pip seeder with the download option, the tool bypasses its package digest verification routines. A remote attacker controlling a package index could exploit this flaw to provide modified package files without triggering expect...