# cve.now: Pypa

The newest entries naming Pypa as an affected vendor (up to 200), of 27 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-115586](https://cve.now/CVE-2026-115586.md): virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9) (CVSS 7.1)
- [CVE-2026-113726](https://cve.now/CVE-2026-113726.md): virtualenv activate runs commands from the environment name in zsh with PROMPT\_SUBST (CVSS 7.8)
- [CVE-2026-113776](https://cve.now/CVE-2026-113776.md): virtualenv activation scripts run code from a path that contains a placeholder name (CVSS 7.8)
- [CVE-2026-113732](https://cve.now/CVE-2026-113732.md): virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote (CVSS 7.8)
- [CVE-2026-113725](https://cve.now/CVE-2026-113725.md): virtualenv bash activate runs commands from an environment name with a backslash before $ (CVSS 7.8)
- [CVE-2026-113724](https://cve.now/CVE-2026-113724.md): virtualenv: Deletion recovery can change a symlink target's mode (CVSS 4.5)
- [CVE-2026-113723](https://cve.now/CVE-2026-113723.md): virtualenv: Bash prompt values can change meaning under older compatibility modes (CVSS 7.1)
- [CVE-2026-113722](https://cve.now/CVE-2026-113722.md): virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax (CVSS 7.8)
- [CVE-2026-113721](https://cve.now/CVE-2026-113721.md): virtualenv: Generated files can follow existing destination links (CVSS 4.5)
- [CVE-2026-113720](https://cve.now/CVE-2026-113720.md): virtualenv: Seeded files retain permissions from an older cache (CVSS 4.4)
- [CVE-2026-113715](https://cve.now/CVE-2026-113715.md): virtualenv: Venv configuration readback can reinterpret path boundaries (CVSS 2.0)
- [CVE-2026-113719](https://cve.now/CVE-2026-113719.md): virtualenv: Seed replacement does not contain metadata deletion paths (CVSS 4.5)
- [CVE-2026-113718](https://cve.now/CVE-2026-113718.md): virtualenv: Xonsh activation literals depend on the script decoding codec (CVSS 7.1)
- [CVE-2026-113717](https://cve.now/CVE-2026-113717.md): virtualenv: Pip seeding with download omits wheel digest verification (CVSS 2.3)
- [CVE-2026-113716](https://cve.now/CVE-2026-113716.md): virtualenv: Builtin creation follows linked environment directories (CVSS 4.5)
- [CVE-2026-113714](https://cve.now/CVE-2026-113714.md): virtualenv: Downloaded wheel selection and caching precede verification (CVSS 2.3)
- [CVE-2026-113713](https://cve.now/CVE-2026-113713.md): virtualenv: Temporary app-data can leave dangling seed package links (CVSS 4.4)
- [CVE-2026-102938](https://cve.now/CVE-2026-102938.md): virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection (CVSS 5.8)
- [CVE-2026-102937](https://cve.now/CVE-2026-102937.md): virtualenv: Command injection via --prompt in activate.bat (batch activator) (CVSS 7.3)
- [CVE-2026-102930](https://cve.now/CVE-2026-102930.md): virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use (CVSS 7.7)
- [CVE-2026-102925](https://cve.now/CVE-2026-102925.md): virtualenv bash and fish activation scripts execute commands embedded in paths (CVSS 7.8)
- [CVE-2026-59890](https://cve.now/CVE-2026-59890.md): setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ (CVSS 6.1)
- [CVE-2026-24049](https://cve.now/CVE-2026-24049.md): wheel Allows Arbitrary File Permission Modification via Path Traversal (CVSS 7.1)
- [CVE-2026-22702](https://cve.now/CVE-2026-22702.md): virtualenv Has TOCTOU Vulnerabilities in Directory Creation (CVSS 4.5)
- [CVE-2025-47273](https://cve.now/CVE-2025-47273.md): setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write (CVSS 7.7)
- [CVE-2024-6345](https://cve.now/CVE-2024-6345.md): Remote Code Execution in pypa/setuptools (CVSS 8.8)
- [CVE-2022-21668](https://cve.now/CVE-2022-21668.md): Pipenv's requirements.txt parsing allows malicious index url in comments (CVSS 8.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/pypa
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.