Threats tagged 'bit-virtualenv-2026-113714'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.3	EPSS 0.2%	CVE-2026-113714virtualenv · Downloaded wheel selection and caching precede verification Low2.3EPSS 0.2%2026-10-29GCVE DatabaseCVE-2026-113714 A vulnerability in virtualenv prior to version 21.14.9 allows a controlled package index to inject misleading verification data during wheel download and caching. This can cause the tool to cache and potentially select unverified or rejected archives due to forged metadata or manipulated cache files. The issue is fixed in version 21.14.9. EPSS 0.2%Report on CVE-2026-113714 Vulnerability #bit-virtualenv-2026-113714 #bitnami	GCVE Database	2026-10-29

Page 1 of 1