Threats tagged 'brew-hatch-cve-2024-53899'

A command injection vulnerability exists in virtualenv versions before 20.26.6, specifically affecting the activation scripts for virtual environments. This occurs because magic template strings are not properly quoted during replacement, allowing injection of arbitrary commands. This vulnerability is distinct from CVE-2024-9287. It affects hatch versions >=1.2.0 <1.6.2 and >=1.9.3 <1.13.0. The issue has been fixed in versions 1.6.2 and 1.13.0.