https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:36:32 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:10953 <p><strong>Affected:</strong> AlmaLinux:8: python-nose-docs, AlmaLinux:8: python-pymongo-doc, AlmaLinux:8: python-sqlalchemy-doc, AlmaLinux:8: python-virtualenv-doc, AlmaLinux:8: python3-PyMySQL, AlmaLinux:8: python3-bson, AlmaLinux:8: python3-distro, AlmaLinux:8: python3-docs, AlmaLinux:8: python3-docutils, AlmaLinux:8: python3-nose and 12 more</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* virtualenv: potential command injection via virtual environment activation scripts (CVE-2024-53899)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: python-nose-docs, AlmaLinux:8: python-pymongo-doc, AlmaLinux:8: python-sqlalchemy-doc, AlmaLinux:8: python-virtualenv-doc, AlmaLinux:8: python3-PyMySQL, AlmaLinux:8: python3-bson, AlmaLinux:8: python3-distro, AlmaLinux:8: python3-docs, AlmaLinux:8: python3-docutils, AlmaLinux:8: python3-nose and 12 more</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* virtualenv: potential command injection via virtual environment activation scripts (CVE-2024-53899)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:10953 https://cve.radiocsirt.org/vuln/bdu:2024-10842 bdu:2024-10842 https://cve.radiocsirt.org/vuln/bdu:2024-10842 https://cve.radiocsirt.org/vuln/bell-cve-2024-53899 <p><strong>Affected:</strong> Alpaquita:23: py3-virtualenv, Alpaquita:stream: py3-virtualenv</p> <p><strong>Affected:</strong> Alpaquita:23: py3-virtualenv, Alpaquita:stream: py3-virtualenv</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-53899 https://cve.radiocsirt.org/vuln/bit-virtualenv-2024-53899 <p><strong>Affected:</strong> Bitnami: virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> <p><strong>Affected:</strong> Bitnami: virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> https://cve.radiocsirt.org/vuln/bit-virtualenv-2024-53899 https://cve.radiocsirt.org/vuln/brew-charm-tools-cve-2024-53899 <p><strong>Affected:</strong> Homebrew: charm-tools</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> <p><strong>Affected:</strong> Homebrew: charm-tools</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> https://cve.radiocsirt.org/vuln/brew-charm-tools-cve-2024-53899 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0303 certfr-2025-avi-0303 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0303 https://cve.radiocsirt.org/vuln/euvd-2026-203983 EUVD-2026-203983 https://cve.radiocsirt.org/vuln/euvd-2026-203983 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53899 <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53899 https://cve.radiocsirt.org/vuln/ghsa-rqc4-2hc7-8c8v <p><strong>Affected:</strong> PyPI: virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> <p><strong>Affected:</strong> PyPI: virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> https://cve.radiocsirt.org/vuln/ghsa-rqc4-2hc7-8c8v https://cve.radiocsirt.org/vuln/msrc_cve-2024-53899 msrc_CVE-2024-53899 https://cve.radiocsirt.org/vuln/msrc_cve-2024-53899 https://cve.radiocsirt.org/vuln/oesa-2025-1241 <p><strong>Affected:</strong> openEuler:24.03-LTS: python-virtualenv</p> <p>Virtualenv is a tool to create isolated Python environments. Since Python 3.3, a subset of it has been integrated into the standard library under the venv module. Note though, that the venv module does not offer all features of this library (e.g. cannot create bootstrap scripts, cannot create virtual environments for other python versions than the host python, not relocatable, etc.). Tools in general as such still may prefer using virtualenv for its ease of upgrading (via pip), unified handling of different Python versions and some more advanced features. Security Fix(es):</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.(CVE-2024-53899)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: python-virtualenv</p> <p>Virtualenv is a tool to create isolated Python environments. Since Python 3.3, a subset of it has been integrated into the standard library under the venv module. Note though, that the venv module does not offer all features of this library (e.g. cannot create bootstrap scripts, cannot create virtual environments for other python versions than the host python, not relocatable, etc.). Tools in general as such still may prefer using virtualenv for its ease of upgrading (via pip), unified handling of different Python versions and some more advanced features. Security Fix(es):</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.(CVE-2024-53899)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1241 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15252-1 <p>oci-cli-3.61.0-1.1 on GA media</p> <p>oci-cli-3.61.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15252-1 https://cve.radiocsirt.org/vuln/pysec-2024-187 <p><strong>Affected:</strong> PyPI: virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> <p><strong>Affected:</strong> PyPI: virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> https://cve.radiocsirt.org/vuln/pysec-2024-187 https://cve.radiocsirt.org/vuln/rhsa-2024:11091 <p>virtualenv: potential command injection via virtual environment activation scripts</p> <p>virtualenv: potential command injection via virtual environment activation scripts</p> https://cve.radiocsirt.org/vuln/rhsa-2024:11091 https://cve.radiocsirt.org/vuln/suse-su-2024:4143-1 <p>Security update for python3-virtualenv</p> <p>Security update for python3-virtualenv</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4143-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53899 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-virtualenv, Ubuntu:Pro:22.04:LTS: python-virtualenv, Ubuntu:Pro:24.04:LTS: python-virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-virtualenv, Ubuntu:Pro:22.04:LTS: python-virtualenv, Ubuntu:Pro:24.04:LTS: python-virtualenv</p> <p>virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53899 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3682 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Python &#34;virtualenv&#34; Paket ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Python &#34;virtualenv&#34; Paket ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3682