Skip to content
Threat Feed
Subscribe

Vendor

PyPA

1 brief RSS
high advisory

Lack of Integrity Verification in virtualenv Seed Wheel Downloads

The virtualenv library lacks integrity checks for downloaded pip and setuptools seed wheels, enabling potential arbitrary code execution via compromised mirrors or MITM attacks.

virtualenv +1 supply-chain vulnerability python command-injection windows
5t 1c updated