Количество 8
Количество 8
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1.
CVE-2026-22702
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments ...
openSUSE-SU-2026:20086-1
Security update for python-virtualenv
SUSE-SU-2026:0233-1
Security update for python-virtualenv
GHSA-597g-3phw-6986
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1. | CVSS3: 4.5 | 0% Низкий | 3 месяца назад | |
CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1. | CVSS3: 4.5 | 0% Низкий | 3 месяца назад | |
CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1. | CVSS3: 4.5 | 0% Низкий | 3 месяца назад | |
CVE-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation | CVSS3: 4.5 | 0% Низкий | около 1 месяца назад | |
CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments ... | CVSS3: 4.5 | 0% Низкий | 3 месяца назад | |
openSUSE-SU-2026:20086-1 Security update for python-virtualenv | 0% Низкий | 2 месяца назад | ||
SUSE-SU-2026:0233-1 Security update for python-virtualenv | 0% Низкий | 2 месяца назад | ||
GHSA-597g-3phw-6986 virtualenv Has TOCTOU Vulnerabilities in Directory Creation | CVSS3: 4.5 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу