Product
A command injection vulnerability in virtualenv prior to 21.14.9 allows arbitrary code execution via malformed interpreter paths when generating POSIX console scripts.