Threats tagged 'bit-virtualenv-2026-113713'

virtualenv versions from 21.14.8 up to but not including 21.14.10 have a vulnerability where temporary app-data seeding can leave dangling symbolic links to package files that are deleted after environment creation. This causes the created environment to depend on cache paths no longer controlled by its owner. The issue is fixed in version 21.14.10.