Search for packages
| purl | pkg:rpm/redhat/python27-python-virtualenv@13.1.0-4?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-57c6-hx7f-efc6
Aliases: CVE-2019-18348 |
python: CRLF injection via the host part of the url passed to urlopen() | There are no reported fixed by versions. |
|
VCID-gvgx-eq9r-d3d2
Aliases: CVE-2020-26116 |
Multiple vulnerabilities have been found in Python, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
|
VCID-tyk4-kazt-kydj
Aliases: CVE-2019-20907 |
Multiple vulnerabilities have been found in Python, the worst of which could result in a Denial of Service condition. | There are no reported fixed by versions. |
|
VCID-vrnn-n6vw-gygb
Aliases: CVE-2019-20916 GHSA-gpvv-69j7-gwj8 PYSEC-2020-173 |
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:20:02.366408+00:00 | RedHat Importer | Affected by | VCID-vrnn-n6vw-gygb | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json | 38.0.0 |
| 2026-04-01T14:18:25.775010+00:00 | RedHat Importer | Affected by | VCID-57c6-hx7f-efc6 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18348.json | 38.0.0 |
| 2026-04-01T14:14:55.659879+00:00 | RedHat Importer | Affected by | VCID-tyk4-kazt-kydj | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json | 38.0.0 |
| 2026-04-01T14:12:52.979196+00:00 | RedHat Importer | Affected by | VCID-gvgx-eq9r-d3d2 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json | 38.0.0 |