p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de python-virtualenv · Página 2

Vulnerabilidades publicadas para python-virtualenv en los últimos 30 días: 20. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 24

  1. CVE-2026-22702

    Media · CVSS 4.5EPSS 0,1%Corrección disponible

    virtualenv Has TOCTOU Vulnerabilities in Directory Creation

    virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

    python-virtualenvSistemas operativos
    • Actualiza a 20.36.1+ds-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2013-1629

    Alta · CVSS 8.4EPSS 6,19%Corrección disponible

    CVE-2013-1629

    pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.

    python-virtualenvSistemas operativos
    • Actualiza a 1.9.1-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →