Gaborbernat

**Name of the Vulnerable Software and Affected Versions** virtualenv versions prior to 21.7.13 **Description** The generated activate (bash and zsh) and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In bash and zsh scripts, a crafted virtual environment path can reach the ` VIRTUAL ENV ` variable when a relocated environment's recorded directory is missing. In the fish script, crafted Tcl or Tk library paths can reach the ` TCL LIBRARY ` or ` TK LIBRARY ` variables. These surplus quotes can terminate the data-only quoted run, causing shell metacharacters to be parsed as commands when a user sources the activation script, which allows arbitrary code execution with the privileges of that user. **Recommendations** Update to version 21.7.13.

**Name of the Vulnerable Software and Affected Versions** virtualenv versions prior to 21.7.12 **Description** The `download wheel()` function fails to verify the bytes of pip and setuptools seed wheels fetched during periodic updates or via the `--download` option against an authoritative digest, unlike the BUNDLE SHA256 verification used for embedded wheels. This allows a compromised index, stale mirror, or intercepted TLS connection to substitute a malicious wheel under the requested distribution, version, and filename. Once substituted, the attacker-controlled wheel is cached and seeded into all subsequently created environments. This verification is only applied to the default PyPI path and is skipped when custom indices are configured via `PIP INDEX URL`, `PIP EXTRA INDEX URL`, or `PIP INDEX`. **Recommendations** Update to version 21.7.12.

**Name of the Vulnerable Software and Affected Versions** virtualenv versions prior to 21.7.12 **Description** The `BatchActivator.quote()` function fails to properly sanitize prompt text before it is inserted into a `cmd.exe` set statement within the `activate.bat` file. An attacker capable of influencing the `--prompt` flag, the `VIRTUALENV PROMPT` variable, or the related configuration value can inject a double quote to terminate the variable assignment and execute arbitrary commands. These commands run with the privileges of the user who activates the generated Windows environment. **Recommendations** Update virtualenv to version 21.7.12 or later.

**Name of the Vulnerable Software and Affected Versions** virtualenv versions prior to 21.7.11 **Description** The `PyEnvCfg.write()` function writes prompt values verbatim to the line-oriented pyvenv.cfg format, while `PyEnvCfg. read values()` parses the file using `str.splitlines()` and accepts the last value for duplicate keys. An attacker who can influence the `--prompt` argument, the `VIRTUALENV PROMPT` variable, or configuration input can insert a line boundary and additional keys, such as `home`. This can lead to consumers using an attacker-selected base interpreter or corrupted environment metadata. This issue requires prompt input from outside the operator's trust boundary. **Recommendations** Update virtualenv to version 21.7.11.