{"action":"Upgrade virtualenv to 20.36.1 or later.","affected":[{"fixed":"20.36.1","introduced":"0"}],"component":"virtualenv","cve_ids":["CVE-2026-22702"],"ecosystem":"PyPI","epss":0.001,"exploited":false,"fixed_versions":["20.36.1"],"ghsa_id":"GHSA-597g-3phw-6986","id":"tcs_01M5KF0H4K5PFF64N6FBNH8J3E","modified_at":"2026-09-10T03:50:32.732715893Z","published_at":"2026-01-13T18:45:57Z","references":["https://osv.dev/vulnerability/GHSA-597g-3phw-6986","https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986","https://nvd.nist.gov/vuln/detail/CVE-2026-22702","https://github.com/pypa/virtualenv/pull/3013","https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc","https://github.com/pypa/virtualenv"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GHSA-597g-3phw-6986","url":"https://osv.dev/vulnerability/GHSA-597g-3phw-6986"}],"summary":"virtualenv Has TOCTOU Vulnerabilities in Directory Creation"}