virtualenv — CVE history (PyPI)

virtualenv

6 CVEs affect the virtualenv PyPI package (highest CVSS 7.8). Latest disclosed: 2026-09-29. Full CVE history sourced from NVD.

Summary

Package
virtualenv (PyPI)
Total CVEs
6
Actively exploited (CISA KEV)
0
Highest CVSS
7.8
Latest disclosed
2026-09-29

Recent CVEs (top 6)

CVESeverityCVSSKEVPublishedSummary
CVE-2026-102938———2026-09-29virtualenv is a tool for creating isolated virtual python environments.
CVE-2026-102937———2026-09-29virtualenv is a tool for creating isolated virtual python environments.
CVE-2026-102930———2026-09-29virtualenv is a tool for creating isolated virtual python environments.
CVE-2026-102925High7.8—2026-09-29virtualenv is a tool for creating isolated virtual python environments.
CVE-2026-22702Medium4.5—2026-01-10virtualenv is a tool for creating isolated virtual python environments.
CVE-2011-4617———2011-12-31virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.

All-time worst (top 2 by CVSS)

CVESeverityCVSSKEVPublishedSummary
CVE-2026-102925High7.8—2026-09-29virtualenv is a tool for creating isolated virtual python environments.
CVE-2026-22702Medium4.5—2026-01-10virtualenv is a tool for creating isolated virtual python environments.