Vulnerabilities in pypa
27 resultsCVE-2026-102930HIGHvirtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before useEPSS 0.2%CVE-2026-102925HIGHvirtualenv bash and fish activation scripts execute commands embedded in pathsEPSS 0.2%CVE-2026-102938MEDIUMvirtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionEPSS 0.1%CVE-2026-113716MEDIUMvirtualenv: Builtin creation follows linked environment directoriesEPSS 0.1%CVE-2026-113721MEDIUMvirtualenv: Generated files can follow existing destination linksEPSS 0.1%CVE-2026-113720MEDIUMvirtualenv: Seeded files retain permissions from an older cacheEPSS 0.1%CVE-2026-22702MEDIUMvirtualenv Has TOCTOU Vulnerabilities in Directory CreationEPSS 0.1%