Changes Scan Docs Trust

← All changes

When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

virtualenv (PyPI) · Teire

Changes Scan Docs Trust

virtualenv

PyPI

latest 21.15.1 · 2026-10-28pypi.org · all 311 versions

Security advisories20

virtualenv: virtualenv: Xonsh activation literals depend on the script decoding codecfixed in 21.14.9
virtualenv: virtualenv: Deletion recovery can change a symlink target's modefixed in 21.14.9
virtualenv: virtualenv: Downloaded wheel selection and caching precede verificationfixed in 21.14.9
virtualenv: virtualenv: Generated files can follow existing destination linksfixed in 21.14.9

Versions that change something

20.36.12026-01fixes 1 advisory
21.7.112026-09fixes 1 advisory
21.7.122026-09fixes 2 advisories
21.7.132026-09fixes 1 advisory

What each upgrade changes in its API

Changes argument countsbreaks on upgrade→ 21.14.11· 2
Changes argumentsbreaks on upgrade→ 21.14.11· 4
Removes APIsbreaks on upgrade→ 21.14.11· 19

virtualenv: virtualenv Has TOCTOU Vulnerabilities in Directory Creation

fixed in 20.36.1

virtualenv: virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTfixed in 21.14.4

virtualenv: virtualenv: Bash prompt values can change meaning under older compatibility modesfixed in 21.14.9

virtualenv: virtualenv activation scripts run code from a path that contains a placeholder namefixed in 21.14.2

virtualenv: virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before usefixed in 21.7.12

virtualenv: virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionfixed in 21.7.11

virtualenv: virtualenv activate.fish runs commands from a path or prompt with a backslash before a quotefixed in 21.14.2

virtualenv: virtualenv: Generated POSIX console launchers interpret destination paths as shell syntaxfixed in 21.14.9

virtualenv: virtualenv: Builtin creation follows linked environment directoriesfixed in 21.14.9

virtualenv: virtualenv: Pip seeding with download omits wheel digest verificationfixed in 21.14.9

virtualenv: virtualenv: Seeded files retain permissions from an older cachefixed in 21.14.9

virtualenv: virtualenv: Seed replacement does not contain metadata deletion pathsfixed in 21.14.9

virtualenv: virtualenv bash and fish activation scripts execute commands embedded in pathsfixed in 21.7.13

virtualenv: virtualenv: Venv configuration readback can reinterpret path boundariesfixed in 21.14.9

virtualenv: virtualenv bash activate runs commands from an environment name with a backslash before $fixed in 21.14.7

virtualenv: virtualenv: Command injection via --prompt in activate.bat (batch activator)fixed in 21.7.12

21.14.2

2026-10

fixes 2 advisories

21.14.42026-10fixes 1 advisory

21.14.72026-10fixes 1 advisory

21.14.92026-10fixes 11 advisories

21.14.112026-103 changes3 breaking