Virtualenv
Approved changes feed: RSS · Atom
cpe:2.3:a:pypa:virtualenv:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pypa (739c9845-1cbb-5295-8ee1-7cab8d3119b1) |
|---|---|
| Product | Virtualenv (7a897016-3615-5fba-9824-38fd3a7a088c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22702 |
vulnerable | 2026-06-08 07:51:13.638005 |
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
MEDIUM (4.5)
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.
Published: 2026-01-10T06:05:53.281Z
Updated: 2026-01-12T16:44:12.734Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.