virtualenv vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-113721Mediumvirtualenv: virtualenv: Generated files can follow existing destination linksCVE-2026-113716Mediumvirtualenv: virtualenv: Builtin creation follows linked environment directoriesCVE-2026-113724Mediumvirtualenv: virtualenv: Deletion recovery can change a symlink target's modeCVE-2026-113722Highvirtualenv: virtualenv: Generated POSIX console launchers interpret destination paths as shell syntaxCVE-2026-113725Highvirtualenv: virtualenv bash activate runs commands from an environment name with a backslash before $CVE-2026-113726Highvirtualenv: virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTCVE-2026-113732Highvirtualenv: virtualenv activate.fish runs commands from a path or prompt with a backslash before a quoteCVE-2026-113776Highvirtualenv: virtualenv activation scripts run code from a path that contains a placeholder nameCVE-2026-102925Highvirtualenv: virtualenv bash and fish activation scripts execute commands embedded in pathsCVE-2026-102937Highvirtualenv: virtualenv: Command injection via --prompt in activate.bat (batch activator)CVE-2026-102930Highvirtualenv: virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before useCVE-2026-102938Mediumvirtualenv: virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionCVE-2026-22702Mediumvirtualenv: virtualenv Has TOCTOU Vulnerabilities in Directory CreationCVE-2024-53899Highvirtualenv: virtualenv allows command injection through activation scripts for a virtual environmentCVE-2011-4617Mediumvirtualenv: Virtualenv Allows Symlink Attack on /tmp/

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo