{"action":"Upgrade virtualenv to 20.36.1 or later.","affected":[{"fixed":"20.36.1","introduced":"0"}],"component":"virtualenv","cve_ids":["CVE-2026-22702"],"ecosystem":"PyPI","epss":0.001,"exploited":false,"fixed_versions":["20.36.1"],"ghsa_id":"GHSA-597g-3phw-6986","id":"tcs_01M5KGWZ7WCXGH38GSJ3VEJTFW","modified_at":"2026-07-07T17:57:28.238961214Z","published_at":"2026-07-07T16:03:18.266289Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2009","https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986","https://nvd.nist.gov/vuln/detail/CVE-2026-22702","https://github.com/pypa/virtualenv/pull/3013","https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc","https://github.com/pypa/virtualenv","https://pypi.org/project/virtualenv","https://github.com/advisories/GHSA-597g-3phw-6986"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2009","url":"https://osv.dev/vulnerability/PYSEC-2026-2009"}],"summary":"virtualenv Has TOCTOU Vulnerabilities in Directory Creation"}