Threats affecting pkg:brew/virtualenvwrapper

CVE-2026-113719 is a vulnerability in virtualenv's app-data seeder that improperly deletes files outside the intended environment during seed package removal. It occurs when the seeder processes distribution metadata containing paths that traverse outside the environment root, allowing deletion of arbitrary user files if the environment is reused and the user has deletion rights. This flaw was introduced in version 20.8.1 and fixed in virtualenvwrapper version 6.1.1_4.

A vulnerability in virtualenv's xonsh activation script allows attacker-controlled prompt text to become executable code during environment activation if the xonsh source decoding uses legacy multibyte encodings like GBK or Big5. This occurs because UTF-8 encoded activation scripts containing non-ASCII characters are misinterpreted under these encodings, causing string literals to be improperly closed and arbitrary statements to execute. The issue affects POSIX activation scripts and requires an attacker to control the prompt or destination argument passed to virtualenv and a user to source the generated activation script. A fix is available in virtualenv version 6.1.1_4.

CVE-2026-113717 is a vulnerability in virtualenv's pip seeder when used with the --download option. The issue arises because virtualenv skips wheel digest verification for wheels obtained via index lookup during pip seeding, allowing an attacker-controlled index to serve a modified pip wheel without detection. This can lead to installation of tampered pip packages in the created environment. The vulnerability requires both --seeder pip and --download options to be enabled and a non-default index configured. A fix is available in virtualenv version 6.1.1_4.

CVE-2026-113714 is a low-severity vulnerability in virtualenv's wheel download and caching mechanism. The issue arises because downloaded wheel files are placed directly into a reusable cache before verification, and verification is based on pip's textual output rather than the actual downloaded file. This can allow a malicious package index to trick virtualenv into using a modified wheel by forging pip output lines, causing a mismatch between the cached file and the verified file. The vulnerability does not bypass TLS or affect the default PyPI setup and was fixed in virtualenv version 6.1.1_4.