virtualenv vulnerabilities (Root)
14 vulnerabilities.
-
virtualenvRoot AIKIDO-2026-785880 in virtualenv - Patched by Root No score -
virtualenvRoot AIKIDO-2026-674766 in virtualenv - Patched by Root No score -
virtualenvRoot virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST 7.8 High -
virtualenvRoot virtualenv activation scripts run code from a path that contains a placeholder name 7.8 High -
virtualenvRoot virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote 7.8 High -
virtualenvRoot virtualenv bash activate runs commands from an environment name with a backslash before $ 7.8 High -
virtualenvRoot virtualenv: Bash prompt values can change meaning under older compatibility modes 7.1 High -
virtualenvRoot virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax 7.8 High -
virtualenvRoot virtualenv: Xonsh activation literals depend on the script decoding codec 7.1 High -
virtualenvRoot virtualenv bash and fish activation scripts execute commands embedded in paths 7.8 High -
virtualenvRoot virtualenv: Command injection via --prompt in activate.bat (batch activator) 7.3 High -
virtualenvRoot virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use 7.7 High -
virtualenvRoot virtualenv Has TOCTOU Vulnerabilities in Directory Creation 4.5 Medium -
virtualenvRoot virtualenv allows command injection through activation scripts for a virtual environment 7.8 High