Known vulnerabilities in py3-virtualenv

Software CPE: cpe:2.3:a:www.virtualenv.org:py3-virtualenv:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting py3-virtualenv py3-virtualenv is affected by 7 known vulnerabilities: 3 high, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151616 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-102938
CWE-93 Low
No
No
21.7.11 22.09.2026 SB2026092256
#VU151615 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-102937
CWE-78 High
No
No
21.7.12 22.09.2026 SB2026092255
#VU151614 - Download of Code Without Integrity Check
CVE-2026-102930
CWE-494 High
No
No
21.7.12 22.09.2026 SB2026092255
#VU151613 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-102925
CWE-78 High
No
No
21.7.13 22.09.2026 SB2026092254
#VU121190 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22702
CWE-367 Low
No
No
20.36.1 13.01.2026 SB2026011335
SB2026011628
SB2026011629
and 8 more
#VU121187 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-68146
CWE-367 Low
No
No
20.36.0 13.01.2026 SB2026011324
SB2026011325
SB2026011334
and 11 more
#VU101032 - Command injection
CVE-2024-53899
CWE-77 Low
No
No
20.26.6 28.11.2024 SB2024112869
SB2024112872
SB2024112873
and 18 more