virtualenv: virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection (moderate). GHSA-9h9j-4vrj-gf7g, BIT-virtualenv-2026-102938, CVE-2026-102938, PYSEC-2026-4012.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?