Threats tagged 'brew-virtualenvwrapper-cve-2026-22702'

CVE-2026-22702 is a TOCTOU (Time-of-Check-Time-of-Use) vulnerability in virtualenv affecting directory creation operations. Local attackers on multi-user systems can exploit a race condition to perform symlink-based attacks, potentially causing cache poisoning, information disclosure, lock bypass, or denial of service. The issue affects all versions up to and including 20.36.1. The vulnerability is fixed in version 20.36.2 and later by using atomic directory creation calls.