PT-2026-132489

Published

2026-10-29

·

Updated

2026-10-29

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlink app data can enable this state even though the command-line flag is disabled for temporary app-data. The resulting environment depends on a cache pathname that its owner no longer controls. This issue is fixed in version 21.14.10.
Vendors
Affected products
Related identifiers
BIT-VIRTUALENV-2026-113713
Found an issue in the description? Have something to add? Feel free to write us 👾