Threats tagged 'bit-virtualenv-2026-113718'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2026-113718virtualenv · Xonsh activation literals depend on the script decoding codec High7.1EPSS 0.2%2026-10-29GCVE DatabaseCVE-2026-113718 A vulnerability in virtualenv prior to version 21.14.9 affects the POSIX xonsh activation script generation. When using legacy multibyte codecs like GBK or Big5, the UTF-8 encoded activate.xsh script can be misinterpreted, allowing an attacker to inject and execute arbitrary statements when the script is sourced. This issue is resolved in version 21.14.9. EPSS 0.2%Report on CVE-2026-113718 Vulnerability #bit-virtualenv-2026-113718 #bitnami	GCVE Database	2026-10-29

Page 1 of 1