# virtualenv (PyPI) vulnerabilities 24 known vulnerabilities (12 high, 8 medium, 3 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 21.15.6 (Nov 6, 2026): no advisory affects it - Newest unaffected release: 21.15.6 (Nov 6, 2026), the latest release - Weekly downloads: 59.5M - Dependents: 3,718 - Releases: 316 since 0.8.0 (Sep 14, 2007) - Registry: https://pypi.org/project/virtualenv/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-115586: 21.14.9 to 21.14.12 (21.14.13 is outside it) - CVE-2026-113726: 0.8.0 to 21.14.3 (21.14.4 is outside it) - CVE-2026-113776: 20.26.6 to 21.14.1 (21.14.2 is outside it) - CVE-2026-113732: 0.8.0 to 21.14.1 (21.14.2 is outside it) - CVE-2026-113725: 0.8.0 to 21.14.6 (21.14.7 is outside it) - CVE-2026-113724: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113723: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113722: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113721: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113720: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113715: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113719: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113718: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113717: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113716: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113714: 0.8.0 to 21.14.8 (21.14.9 is outside it) - CVE-2026-113713: 21.14.8 to 21.14.9 (21.14.10 is outside it) - CVE-2026-102938: 0.8.0 to 21.7.10 (21.7.11 is outside it) - CVE-2026-102937: 0.8.0 to 21.7.11 (21.7.12 is outside it) - CVE-2026-102930: 0.8.0 to 21.7.11 (21.7.12 is outside it) - CVE-2026-102925: 0.8.0 to 21.7.12 (21.7.13 is outside it) - CVE-2026-22702: 0.8.0 to 20.36.0 (20.36.1 is outside it) - CVE-2024-53899: 0.8.0 to 20.26.5 (20.26.6 is outside it) - CVE-2011-4617: 0.8.0 to 1.4.9 (1.5.0 is outside it) ## Advisories (24) ### [CVE-2026-115586](https://cve.now/CVE-2026-115586): virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9) - Severity: High 7.1 - Published: Oct 23, 2026 - Affected: from 21.14.9, fixed in 21.14.13. - Fixed in 21.14.13 (released Oct 22, 2026, 1 day before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113726](https://cve.now/CVE-2026-113726): virtualenv activate runs commands from the environment name in zsh with PROMPT\_SUBST - Severity: High 7.8 - Published: Oct 20, 2026 - Affected: fixed in 21.14.4. - Fixed in 21.14.4 (released Oct 2, 2026, 18 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113776](https://cve.now/CVE-2026-113776): virtualenv activation scripts run code from a path that contains a placeholder name - Severity: High 7.8 - Published: Oct 20, 2026 - Affected: from 20.26.6, fixed in 21.14.2. - Fixed in 21.14.2 (released Oct 1, 2026, 19 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113732](https://cve.now/CVE-2026-113732): virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote - Severity: High 7.8 - Published: Oct 20, 2026 - Affected: fixed in 21.14.2. - Fixed in 21.14.2 (released Oct 1, 2026, 19 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113725](https://cve.now/CVE-2026-113725): virtualenv bash activate runs commands from an environment name with a backslash before $ - Severity: High 7.8 - Published: Oct 20, 2026 - Affected: fixed in 21.14.7. - Fixed in 21.14.7 (released Oct 12, 2026, 8 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113724](https://cve.now/CVE-2026-113724): virtualenv: Deletion recovery can change a symlink target's mode - Severity: Medium 4.5 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113723](https://cve.now/CVE-2026-113723): virtualenv: Bash prompt values can change meaning under older compatibility modes - Severity: High 7.1 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113722](https://cve.now/CVE-2026-113722): virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax - Severity: High 7.8 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113721](https://cve.now/CVE-2026-113721): virtualenv: Generated files can follow existing destination links - Severity: Medium 4.5 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113720](https://cve.now/CVE-2026-113720): virtualenv: Seeded files retain permissions from an older cache - Severity: Medium 4.4 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113715](https://cve.now/CVE-2026-113715): virtualenv: Venv configuration readback can reinterpret path boundaries - Severity: Low 2.0 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113719](https://cve.now/CVE-2026-113719): virtualenv: Seed replacement does not contain metadata deletion paths - Severity: Medium 4.5 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113718](https://cve.now/CVE-2026-113718): virtualenv: Xonsh activation literals depend on the script decoding codec - Severity: High 7.1 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113717](https://cve.now/CVE-2026-113717): virtualenv: Pip seeding with download omits wheel digest verification - Severity: Low 2.3 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113716](https://cve.now/CVE-2026-113716): virtualenv: Builtin creation follows linked environment directories - Severity: Medium 4.5 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113714](https://cve.now/CVE-2026-113714): virtualenv: Downloaded wheel selection and caching precede verification - Severity: Low 2.3 - Published: Oct 20, 2026 - Affected: fixed in 21.14.9. - Fixed in 21.14.9 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-113713](https://cve.now/CVE-2026-113713): virtualenv: Temporary app-data can leave dangling seed package links - Severity: Medium 4.4 - Published: Oct 20, 2026 - Affected: from 21.14.8, fixed in 21.14.10. - Fixed in 21.14.10 (released Oct 17, 2026, 3 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-102938](https://cve.now/CVE-2026-102938): virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection - Severity: Medium 5.8 - Published: Sep 29, 2026 - Affected: fixed in 21.7.11. - Fixed in 21.7.11 (released Sep 17, 2026, 12 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-102937](https://cve.now/CVE-2026-102937): virtualenv: Command injection via --prompt in activate.bat (batch activator) - Severity: High 7.3 - Published: Sep 29, 2026 - Affected: fixed in 21.7.12. - Fixed in 21.7.12 (released Sep 18, 2026, 11 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-102930](https://cve.now/CVE-2026-102930): virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use - Severity: High 7.7 - Published: Sep 29, 2026 - Affected: fixed in 21.7.12. - Fixed in 21.7.12 (released Sep 18, 2026, 11 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-102925](https://cve.now/CVE-2026-102925): virtualenv bash and fish activation scripts execute commands embedded in paths - Severity: High 7.8 - Published: Sep 29, 2026 - Affected: fixed in 21.7.13. - Fixed in 21.7.13 (released Sep 18, 2026, 11 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2026-22702](https://cve.now/CVE-2026-22702): virtualenv Has TOCTOU Vulnerabilities in Directory Creation - Severity: Medium 4.5 - Published: Jan 10, 2026 - Affected: fixed in 20.36.1. - Fixed in 20.36.1 (released Jan 9, 2026, 1 day before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2024-53899](https://cve.now/CVE-2024-53899): virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. - Severity: High 8.4 - Published: Nov 24, 2024 - Affected: fixed in 20.26.6. - Fixed in 20.26.6 (released Sep 27, 2024, 58 days before disclosure). - The latest release, 21.15.6, is not affected. ### [CVE-2011-4617](https://cve.now/CVE-2011-4617): virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/. - Severity: Unrated - Published: Dec 31, 2011 - Affected: fixed in 1.5. - Fixed in 1.5.0 (released Sep 14, 2010, 473 days before disclosure). - The latest release, 21.15.6, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/virtualenv Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.