PVE-2024-73456

Advisory

Affected versions of the virtualenv package are vulnerable to command injection. This vul…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

~~~~~~~~~~~~~~~~~~ - Properly quote string placeholders in activation script templates t…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/pypa/virtualenv/commit/86dddeda7c991f8529e1995bbff280fb7b761972
• https://pypi.org/project/virtualenv
• https://data.safetycli.com/changelogs/virtualenv/