Threats tagged 'bit-virtualenv-2026-113719'

A vulnerability in virtualenv prior to version 21.14.9 allows deletion of files outside the intended environment during environment creation if existing seed-package metadata is reused. This occurs due to improper handling of metadata paths, which can lead to deletion of files outside the environment root with the invoking user's permissions. Fresh environments or those created with --clear are not affected. The issue is fixed in version 21.14.9.