CVE-2026-22702
2 advisories.
PyPI/virtualenv CVE-2026-22702: medium 4.5, EPSS 0.10%
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Action: Upgrade virtualenv to 20.36.1 or later.
pip install virtualenv==20.36.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20.36.1 | - |
Fixed versions
| 20.36.1 |
Sources
- osv: GHSA-597g-3phw-6986
- https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986
- https://nvd.nist.gov/vuln/detail/CVE-2026-22702
- https://github.com/pypa/virtualenv/pull/3013
- https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc
- https://github.com/pypa/virtualenv
CVE-2026-22702 · published · modified · JSON
PyPI/virtualenv CVE-2026-22702: medium 4.5, EPSS 0.10%
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Action: Upgrade virtualenv to 20.36.1 or later.
pip install virtualenv==20.36.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20.36.1 | - |
Fixed versions
| 20.36.1 |
Sources
- osv: PYSEC-2026-2009
- https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986
- https://nvd.nist.gov/vuln/detail/CVE-2026-22702
- https://github.com/pypa/virtualenv/pull/3013
- https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc
- https://github.com/pypa/virtualenv
- https://pypi.org/project/virtualenv
- https://github.com/advisories/GHSA-597g-3phw-6986
CVE-2026-22702 · published · modified · JSON