pypa virtualenv
22 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-115586 | >= 21.14.9, < 21.14.13 | virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regr… | HIGH 7.1 | 0.2 % | ||
| CVE-2026-113726 | < 21.14.4 | virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST | HIGH 7.8 | 0.3 % | ||
| CVE-2026-113776 | >= 20.26.6, < 21.14.2 | virtualenv activation scripts run code from a path that contains a placeholder name | HIGH 7.8 | 0.3 % | ||
| CVE-2026-113732 | < 21.14.2 | virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote | HIGH 7.8 | 0.2 % | ||
| CVE-2026-113725 | < 21.14.7 | virtualenv bash activate runs commands from an environment name with a backslash before $ | HIGH 7.8 | 0.2 % | ||
| CVE-2026-113724 | < 21.14.9 | virtualenv: Deletion recovery can change a symlink target's mode | MEDIUM 4.5 | 0.2 % | ||
| CVE-2026-113723 | < 21.14.9 | virtualenv: Bash prompt values can change meaning under older compatibility modes | HIGH 7.1 | 0.2 % | ||
| CVE-2026-113722 | < 21.14.9 | virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax | HIGH 7.8 | 0.3 % | ||
| CVE-2026-113721 | < 21.14.9 | virtualenv: Generated files can follow existing destination links | MEDIUM 4.5 | 0.1 % | ||
| CVE-2026-113720 | < 21.14.9 | virtualenv: Seeded files retain permissions from an older cache | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-113715 | < 21.14.9 | virtualenv: Venv configuration readback can reinterpret path boundaries | LOW 2.0 | 0.2 % | ||
| CVE-2026-113719 | < 21.14.9 | virtualenv: Seed replacement does not contain metadata deletion paths | MEDIUM 4.5 | 0.2 % | ||
| CVE-2026-113718 | < 21.14.9 | virtualenv: Xonsh activation literals depend on the script decoding codec | HIGH 7.1 | 0.2 % | ||
| CVE-2026-113717 | < 21.14.9 | virtualenv: Pip seeding with download omits wheel digest verification | LOW 2.3 | 0.3 % | ||
| CVE-2026-113716 | < 21.14.9 | virtualenv: Builtin creation follows linked environment directories | MEDIUM 4.5 | 0.1 % | ||
| CVE-2026-113714 | < 21.14.9 | virtualenv: Downloaded wheel selection and caching precede verification | LOW 2.3 | 0.2 % | ||
| CVE-2026-113713 | >= 21.14.8, < 21.14.10 | virtualenv: Temporary app-data can leave dangling seed package links | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-102938 | < 21.7.11 | virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection | MEDIUM 5.8 | 0.1 % | ||
| CVE-2026-102937 | < 21.7.12 | virtualenv: Command injection via --prompt in activate.bat (batch activator) | HIGH 7.3 | 0.1 % | ||
| CVE-2026-102930 | < 21.7.12 | virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use | HIGH 7.7 | 0.2 % | ||
| CVE-2026-102925 | < 21.7.13 | virtualenv bash and fish activation scripts execute commands embedded in paths | HIGH 7.8 | 0.2 % | ||
| CVE-2026-22702 | < 20.36.1 | virtualenv Has TOCTOU Vulnerabilities in Directory Creation | MEDIUM 4.5 | 0.1 % |