Virtualenv

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-22702 PyPI MEDIUM PATCH This Month

Virtualenv versions up to 20.36.1 is affected by improper link resolution before file access (CVSS 4.5).

Python Race Condition Virtualenv Red Hat Suse

NVD GitHub

CVSS 3.1

4.5

EPSS

0.0%

CVE-2024-53899 PyPI HIGH POC PATCH This Week

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Command Injection Virtualenv

NVD GitHub

CVSS 3.1

7.8

EPSS

1.6%

CVE-2026-22702 PyPI

EPSS 0% CVSS 4.5

MEDIUM PATCH This Month

Virtualenv versions up to 20.36.1 is affected by improper link resolution before file access (CVSS 4.5).

Python Race Condition Virtualenv +2

NVD GitHub

CVE-2024-53899 PyPI

EPSS 2% CVSS 7.8

HIGH POC PATCH This Week

Command Injection Virtualenv

NVD GitHub