python-virtualenv vulnerabilities (Azure Linux)
27 vulnerabilities.
-
python-virtualenvAzure Linux virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST 7.8 High -
python-virtualenvAzure Linux virtualenv activation scripts run code from a path that contains a placeholder name 7.8 High -
python-virtualenvAzure Linux virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote 7.8 High -
python-virtualenvAzure Linux virtualenv bash activate runs commands from an environment name with a backslash before $ 7.8 High -
python-virtualenvAzure Linux virtualenv: Deletion recovery can change a symlink target's mode 4.5 Medium -
python-virtualenvAzure Linux virtualenv: Bash prompt values can change meaning under older compatibility modes 7.1 High -
python-virtualenvAzure Linux virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax 7.8 High -
python-virtualenvAzure Linux virtualenv: Generated files can follow existing destination links 4.5 Medium -
python-virtualenvAzure Linux virtualenv: Seeded files retain permissions from an older cache 4.4 Medium -
python-virtualenvAzure Linux virtualenv: Venv configuration readback can reinterpret path boundaries 2.0 Low -
python-virtualenvAzure Linux virtualenv: Seed replacement does not contain metadata deletion paths 4.5 Medium -
python-virtualenvAzure Linux virtualenv: Builtin creation follows linked environment directories 4.5 Medium -
python-virtualenvAzure Linux virtualenv: Temporary app-data can leave dangling seed package links 4.4 Medium -
python-virtualenvAzure Linux urllib3: HTTPS proxy TLS configuration may be ignored or overridden 7.6 High -
python-virtualenvAzure Linux virtualenv bash and fish activation scripts execute commands embedded in paths 7.8 High -
python-virtualenvAzure Linux virtualenv: Command injection via --prompt in activate.bat (batch activator) 7.3 High -
python-virtualenvAzure Linux virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use 7.7 High -
python-virtualenvAzure Linux virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection 5.8 Medium -
python-virtualenvAzure Linux pip absolute path traversal during download from malicious package indexes 5.6 Medium -
python-virtualenvAzure Linux pip can extract console_scripts and gui_scripts outside installation directory 4.1 Medium -
python-virtualenvAzure Linux pip self-update functionality can import newly installed modules after wheel installation 5.3 Medium -
python-virtualenvAzure Linux pip doesn't reject concatenated ZIP and tar archives 4.6 Medium -
python-virtualenvAzure Linux Limited path traversal when installing wheel archives 2.0 Low -
python-virtualenvAzure Linux wheel Allows Arbitrary File Permission Modification via Path Traversal 7.1 High -
python-virtualenvAzure Linux virtualenv Has TOCTOU Vulnerabilities in Directory Creation 4.5 Medium -
python-virtualenvAzure Linux urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
python-virtualenvAzure Linux virtualenv allows command injection through activation scripts for a virtual environment 7.8 High