Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

GHSA-rqc4-2hc7-8c8v

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rqc4-2hc7-8c8v

virtualenv allows command injection through activation scripts for a virtual environment virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

gitlab/pypi/virtualenv/CVE-2024-53899

virtualenv allows command injection through activation scripts for a virtual environment virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

pypa/virtualenv/PYSEC-2024-187

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

pysec/PYSEC-2024-187

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.