virtualenv vulnerabilities (TuxCare)
15 vulnerabilities.
-
virtualenvTuxCare virtualenv bash activate runs commands from an environment name with a backslash before $ 7.8 High -
virtualenvTuxCare virtualenv: Bash prompt values can change meaning under older compatibility modes 7.1 High -
virtualenvTuxCare virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax 7.8 High -
virtualenvTuxCare virtualenv: Generated files can follow existing destination links 4.5 Medium -
virtualenvTuxCare virtualenv: Seeded files retain permissions from an older cache 4.4 Medium -
virtualenvTuxCare virtualenv: Venv configuration readback can reinterpret path boundaries 2.0 Low -
virtualenvTuxCare virtualenv: Seed replacement does not contain metadata deletion paths 4.5 Medium -
virtualenvTuxCare virtualenv: Pip seeding with download omits wheel digest verification 2.3 Low -
virtualenvTuxCare virtualenv: Builtin creation follows linked environment directories 4.5 Medium -
virtualenvTuxCare virtualenv: Downloaded wheel selection and caching precede verification 2.3 Low -
virtualenvTuxCare virtualenv bash and fish activation scripts execute commands embedded in paths 7.8 High -
virtualenvTuxCare virtualenv: Command injection via --prompt in activate.bat (batch activator) 7.3 High -
virtualenvTuxCare virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use 7.7 High -
virtualenvTuxCare virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection 5.8 Medium -
virtualenvTuxCare TuxCare security update for virtualenv (1 CVE) No score