p PatchFirst

PatchFirst · Latest vulnerabilities

python-virtualenv vulnerabilities · Page 2

Vulnerabilities published for python-virtualenv in the last 30 days: 20. Listed in the KEV catalogue: 0.

RSS ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 24

  1. CVE-2026-22702

    Medium · CVSS 4.5EPSS 0.1%Fix available

    virtualenv Has TOCTOU Vulnerabilities in Directory Creation

    virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

    python-virtualenvOperating systems
    • Update to 20.36.1+ds-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →