📦 Virtualenv

CVE-2024-53899 is a command injection vulnerability in virtualenv's activation scripts where magic template strings are improperly quoted during replacement. This allows attackers to execute arbitrary...

This CVE describes a TOCTOU vulnerability in virtualenv that allows local attackers to exploit race conditions during directory creation. Attackers can redirect app_data and lock file operations to at...