https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T20:56:59.228924+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-113723 CVE-2026-113723 — virtualenv: Bash prompt values can change meaning under older compatibility modes 2026-10-22T20:56:59.230343+00:00

Affected: pypa virtualenv

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. This vulnerability is fixed in 21.14.9.