virtualenv: Builtin creation follows linked environment directories
影響: pip:virtualenv < 21.14.9 → 21.14.9
The builtin creator accepts existing directory symlinks through ensure_dir() and writes environment files through those directories. This permits writes outside the requested destination. Anthropic's OSS Scanner reported this as ANT-2026-MUFJEG11 in virtualenv-20261015-005, received on 15 October 2026. Affected area Directory preparation before environment files are created. Attacker-controlled input Another account must be able to prepare linked entries below the chosen destination before crea…
Read on GitHub Advisory Database
| CVE | CVE-2026-113716 |
|---|---|
| Source | GitHub Advisory Database |
| Fetched | 10/22/2026, 09:22 AM |
| Data | Markdown JSON |
On 10/22/2026, 06:35 AM, GitHub Advisory Database published "virtualenv: Builtin creation follows linked environment directories" (type: Advisory). Severity is "Medium" (medium). Related technologies: Python. CVE: CVE-2026-113716.