Approved changes feed: RSS · Atom

cpe:2.3:a:autoswitch_python_virtualenv_project:autoswitch_python_virtualenv:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutoswitch Python Virtualenv Project (15239c15-fca4-5ba6-a17e-0af854e8ca68)
ProductAutoswitch Python Virtualenv (a0d69890-9a0d-5527-a609-c38d0ab15a28)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/michaelaquilina/zsh-autoswitch-virtualenv purl2cpe 2026-06-01 10:16:39.825097

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11073 vulnerable 2026-06-08 05:16:36.397357 Remote Code Execution in Autoswitch Python Virtualenv
HIGH (7.9)
In Autoswitch Python Virtualenv before version 0.16.0, a user who enters a directory with a malicious `.venv` file could run arbitrary code without any user interaction. This is fixed in version: 1.16.0
Published: 2020-05-13T18:55:14.000Z
Updated: 2024-08-04T11:21:14.525Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.