Virtualenv
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Virtualenv.
By the Year
In 2025 there have been 0 vulnerabilities in Virtualenv. Last year, in 2024 Virtualenv had 1 security vulnerability published. Right now, Virtualenv is on track to have less security vulnerabilities in 2025 than it did last year.
Year | Vulnerabilities | Average Score |
---|---|---|
2025 | 0 | 0.00 |
2024 | 1 | 9.80 |
2023 | 0 | 0.00 |
2022 | 0 | 0.00 |
2021 | 0 | 0.00 |
2020 | 0 | 0.00 |
2019 | 0 | 0.00 |
2018 | 0 | 0.00 |
It may take a day or so for new Virtualenv vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Virtualenv Security Vulnerabilities
Virtualenv Command Injection Vulnerability in Activation Scripts
CVE-2024-53899
9.8 - Critical
- November 24, 2024
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
Command Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Virtualenv or by Virtualenv? Click the Watch button to subscribe.