Логотип exploitDog
bind:"CVE-2026-22702"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2026-22702"

Количество 8

Количество 8

ubuntu логотип

CVE-2026-22702

3 месяца назад

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

CVSS3: 4.5
EPSS: Низкий
redhat логотип

CVE-2026-22702

3 месяца назад

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

CVSS3: 4.5
EPSS: Низкий
nvd логотип

CVE-2026-22702

3 месяца назад

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

CVSS3: 4.5
EPSS: Низкий
msrc логотип

CVE-2026-22702

около 1 месяца назад

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

CVSS3: 4.5
EPSS: Низкий
debian логотип

CVE-2026-22702

3 месяца назад

virtualenv is a tool for creating isolated virtual python environments ...

CVSS3: 4.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20086-1

2 месяца назад

Security update for python-virtualenv

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0233-1

2 месяца назад

Security update for python-virtualenv

EPSS: Низкий
github логотип

GHSA-597g-3phw-6986

2 месяца назад

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

CVSS3: 4.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

CVSS3: 4.5
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

CVSS3: 4.5
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.

CVSS3: 4.5
0%
Низкий
3 месяца назад
msrc логотип
CVE-2026-22702

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

CVSS3: 4.5
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments ...

CVSS3: 4.5
0%
Низкий
3 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:20086-1

Security update for python-virtualenv

0%
Низкий
2 месяца назад
suse-cvrf логотип
SUSE-SU-2026:0233-1

Security update for python-virtualenv

0%
Низкий
2 месяца назад
github логотип
GHSA-597g-3phw-6986

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

CVSS3: 4.5
0%
Низкий
2 месяца назад

Уязвимостей на страницу