Vulnerabilities for virtualenv

First version without a known vulnerability: 20.36.1

Details

• GHSA-597g-3phw-69862026-01-13

  virtualenv Has TOCTOU Vulnerabilities in Directory Creation

  Fixed in: 20.36.1

• GHSA-rqc4-2hc7-8c8v2024-11-24

  virtualenv allows command injection through activation scripts for a virtual environment

  Fixed in: 20.26.6

• GHSA-3jhc-wjqf-5f2c2022-05-17

  Virtualenv Allows Symlink Attack on /tmp/

  Fixed in: 1.5