Количество 10
Количество 10
GHSA-597g-3phw-6986
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.
CVE-2026-22702
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments ...
openSUSE-SU-2026:20086-1
Security update for python-virtualenv
SUSE-SU-2026:0233-1
Security update for python-virtualenv
BDU:2026-09807
Уязвимость инструмента для создания изолированных виртуальных окружений в Python virtualenv, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260706-73-0061
Уязвимость python-virtualenv
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-597g-3phw-6986 virtualenv Has TOCTOU Vulnerabilities in Directory Creation | CVSS3: 4.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1. | CVSS3: 4.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1. | CVSS3: 4.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1. | CVSS3: 4.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation | CVSS3: 4.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments ... | CVSS3: 4.5 | 0% Низкий | 7 месяцев назад |
 | openSUSE-SU-2026:20086-1 Security update for python-virtualenv | 0% Низкий | 6 месяцев назад | |
| SUSE-SU-2026:0233-1 Security update for python-virtualenv | 0% Низкий | 6 месяцев назад | |
 | BDU:2026-09807 Уязвимость инструмента для создания изолированных виртуальных окружений в Python virtualenv, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.5 | 0% Низкий | 7 месяцев назад |
 | ROS-20260706-73-0061 Уязвимость python-virtualenv | CVSS3: 4.5 | 0% Низкий | 27 дней назад |
Уязвимостей на страницу