Insecure Temporary File

Overview Affected versions of this package are vulnerable to Insecure Temporary File via the FromAppData seeder in src/virtualenv/seed/embed/viaappdata/viaappdata.py when --symlink-app-data is used with a transient temporary app-data directory. Because the app-data directory is removed after...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the FromAppData seed mechanism in src/virtualenv/seed/embed/viaappdata/viaappdata.py, when symlinkappdata is enabled against a transient temporary app-data store. In this configuration, virtualenv creates symlinks fro...