3031 matches found
gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), hmd-cli-repo (>=0.3.149, <=0.3.165) +4 more potentially affected by CVE-2026-113721 via virtualenv (20.30.0)
virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-113721 Source advisory: OSV:GHSA-558C-9HV2-4...
appcensus-dynamic-repos (>=2.0.113, <=2.1.117), microscopemetrics (0.2.4) +11 more potentially affected by CVE-2026-113721 via virtualenv (20.32.0)
virtualenv PYPI version 20.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - appcensus-dynamic-repos =2.0.113, =0.6.0, =1.0.0, =0.1.1, =0.5.4, =1.0.1, =1.0.119 Source cves: CVE-2026-113721 Source advisory:...
waldiez-runner (0.5.9) potentially affected by CVE-2026-113721 via virtualenv (20.33.0)
virtualenv PYPI version 20.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - waldiez-runner 0.5.9 Source cves: CVE-2026-113721 Source advisory: OSV:GHSA-558C-9HV2-4PRJ...
delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113721 via virtualenv (20.33.1)
virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113721 Source advisory: OSV:GHSA-558C-9HV2-4PRJ...
b1ddi (0.0.2), delete-branches (>=1.0.0, <=1.1.3) +15 more potentially affected by CVE-2026-113721 via virtualenv (20.34.0)
virtualenv PYPI version 20.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - b1ddi 0.0.2 - delete-branches =1.0.0, =1.1.14, =1.0.0, =1.1.0, =1.17.0, =1.25.0 and more Source cves: CVE-2026-113721 Source advisory:...
delete-branches (1.2.14), delete-workflow-runs (1.2.32) +6 more potentially affected by CVE-2026-113721 via virtualenv (20.35.3)
virtualenv PYPI version 20.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.14 - delete-workflow-runs 1.2.32 - ironoc-pytest-conor-heffron =2.1.7, =2.2.0 - pkg-15903 0.1.100 - pkg-26548 1.3.32 -...
delete-branches (1.2.15), delete-workflow-runs (1.2.33) +12 more potentially affected by CVE-2026-113721 via virtualenv (20.35.4)
virtualenv PYPI version 20.35.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.15 - delete-workflow-runs 1.2.33 - elroy =0.0.62, =0.0.1b1, =0.6.0, =2.2.1, =6.0.0, =1.2.3, =0.6.2, =0.7.0 Source cves...
aieng-platform-onboard (>=0.5.0, <=0.7.5), autodocgenerator (>=0.5.1, <=1.6.6.8) +10 more potentially affected by CVE-2026-113721 via virtualenv (20.36.1)
virtualenv PYPI version 20.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aieng-platform-onboard =0.5.0, =0.5.1, =1.1.0.dev20260322010408, =0.0.0, =2.2.9, =0.5.0, =1.0.0, =1.0.0b2, =1.1.0, =1.2.0 - waldiez-runner...
aeso-mcp (>=0.2.0, <=0.3.0), aia-read-svc (>=0.5.1, <=0.6.2) +468 more potentially affected by CVE-2026-113721 via virtualenv (20.39.1)
virtualenv PYPI version 20.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aeso-mcp =0.2.0, =0.5.1, =2023.2.21, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.6.4, =0.2.0rc3, =0.1.0, =0.1.8 - api-buddy 0.5.0...
agentics-py (>=0.0.7, <=0.3.6), agentis (>=1.2.6, <=1.2.7) +202 more potentially affected by CVE-2026-113721 via virtualenv (>=21.1.0, <=21.14.5)
virtualenv PYPI version =21.1.0, =0.0.7, =1.2.6, =0.1.68, =0.1.0, =0.1.0, =0.5.0b2, =1.1.0a20250429, =0.0.3, =0.0.1a0, =0.1.1b20230324, =1.0.1b20240405, =1.0.1b20240405, =1.0.21, =0.2.40, =0.2.70 and more Source cves: CVE-2026-113721 Source advisory: OSV:GHSA-558C-9HV2-4PRJ...
agentics-py (>=0.0.7, <=0.3.6), agentis (>=1.2.6, <=1.2.7) +202 more potentially affected by CVE-2026-113721 via virtualenv (>=21.1.0, <=21.14.5)
virtualenv PYPI version =21.1.0, =0.0.7, =1.2.6, =0.1.68, =0.1.0, =0.1.0, =0.5.0b2, =1.1.0a20250429, =0.0.3, =0.0.1a0, =0.1.1b20230324, =1.0.1b20240405, =1.0.1b20240405, =1.0.21, =0.2.40, =0.2.70 and more Source cves: CVE-2026-113721 Source advisory: GHSA-558C-9HV2-4PRJ...
GHSA-558C-9HV2-4PRJ virtualenv: Generated files can follow existing destination links
Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environment. The template writer tests exists before unlinking, which misses dangling symlinks; the configuration writer opens the existing path directly. Anthropic's OSS Scanner reported...
virtualenv: Generated files can follow existing destination links
Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environment. The template writer tests exists before unlinking, which misses dangling symlinks; the configuration writer opens the existing path directly. Anthropic's OSS Scanner reported...
EUVD-2026-105303
virtualenv: Generated files can follow existing destination links...
dcoscli (>=0.1.1, <=0.1.8) potentially affected by CVE-2026-113721 via virtualenv (12.1.1)
virtualenv PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.1, =0.1.8 Source cves: CVE-2026-113721 Source advisory: OSV:GHSA-558C-9HV2-4PRJ...
nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-113721 via virtualenv (20.31.2)
virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-113721 Source advisory:...
pystarter (>=1.0.0, <=1.1.2), terraenv (>=0.6.0.dev0, <=0.6.2) potentially affected by CVE-2026-113721 via virtualenv (16.1.0)
virtualenv PYPI version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pystarter =1.0.0, =0.6.0.dev0, =0.6.2 Source cves: CVE-2026-113721 Source advisory: OSV:GHSA-558C-9HV2-4PRJ...
Virtualenv: Builtin Creation Follows Linked Environment Directories
Summary The builtin creator accepts existing directory symlinks through ensuredir and writes environment files through those directories. This permits writes outside the requested destination. Anthropic's OSS Scanner reported this as "ANT-2026-MUFJEG11" in "virtualenv-20261015-005", received on 1...
Virtualenv: Deletion Recovery Can Change A Symlink Target's Mode
Summary The deletion error handler obtains permission bits with lstat but applies them through chmod, which follows symlinks. On an eligible unlink failure this can change permissions outside the destination. Anthropic's OSS Scanner reported this as "ANT-2026-UK90QC27" in "virtualenv-20261015-005...