PyPI virtualenv
productUSpkg:pypi/virtualenv
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
unpatched
0
critical
by severity
0critical1high0medium1low
updated 2026-10-27
01
vulnerabilities (24)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-53899US | high7.8 | — |
| CVE-2011-4617US | low1.2 | — |
| CVE-2026-113717US | —OT elevated | — |
| CVE-2026-113722US | — | — |
| CVE-2026-113776US | — | — |
| CVE-2026-113726US | — | — |
| CVE-2026-113715US | — | — |
| CVE-2026-113732US | — | — |
| CVE-2026-113714US | — | — |
| CVE-2026-115586US | — | — |
| CVE-2026-102930US | —OT elevated | — |
| CVE-2026-113725US | — | — |
| CVE-2026-113723US | — | — |
| CVE-2026-113718US | — | — |
| CVE-2026-102925US | — | — |
| CVE-2026-102938US | — | — |
| CVE-2026-113724US | — | — |
| CVE-2026-113721US | — | — |
| CVE-2026-113719US | — | — |
| CVE-2026-113716US | — | — |
| CVE-2026-102937US | — | — |
| CVE-2026-113713US | — | — |
| CVE-2026-113720US | — | — |
| CVE-2026-22702US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')10 CVEs
- CWE-59Improper Link Resolution Before File Access ('Link Following')5 CVEs
- CWE-116Improper Encoding or Escaping of Output3 CVEs
- CWE-494Download of Code Without Integrity Check2 CVEs
- CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')2 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
- CWE-354Improper Validation of Integrity Check Value1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USOSV.dev24 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan