Threats tagged 'bit-virtualenv-2026-113721'

A vulnerability in virtualenv prior to version 21.14.9 allows local attackers to cause environment creation to overwrite files outside the intended directory tree by exploiting how symbolic or hard links are handled during activation file generation. This can lead to unauthorized file modification with the invoking user's permissions. The issue is fixed in version 21.14.9.