Threats tagged 'brew-pdm-cve-2024-53899'

CVE-2024-53899 is a command injection vulnerability in virtualenv versions before 20.26.6, affecting the pdm product. The flaw arises because magic template strings in the activation scripts for virtual environments are not properly quoted, allowing an attacker to inject commands. This vulnerability is distinct from CVE-2024-9287. It affects pdm versions >=2.0.0 <2.9.3_2 and >=2.12.3 <2.19.2. A fix is available in versions 2.9.3_2 and 2.19.2.