CVE-2024-53899
Critical · 9.8CVSS
9.8
EPSS
1.6%
Published
Nov 24, 2024
CISA due date
—
Cloudanix analysis
A bug in a popular tool for creating isolated Python setups could let attackers run their own code on a computer whenever someone activates one of those setups.
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- Low
- Impact
- Full Compromise
- Component
- Library
- Class
- Command Injection
- Remediation
- Upgrade
- Effort
- Low
- Patch risk
- Low
What it actually does
Improper quoting of magic template strings during replacement in virtualenv activation scripts permits command injection when the scripts are sourced.
Why it matters to the business
Attackers may gain arbitrary code execution on developer or CI systems whenever a virtual environment is activated, increasing risk of supply-chain compromise or data theft in environments with high Python dependency counts.
How an attack unfolds
An attacker supplies or modifies a virtual environment whose activation scripts contain unquoted template strings; when a victim activates the environment the injected commands execute with the user's privileges.
How to fix it
Upgrade pypa/virtualenv to the version containing commit ec04726d065372ffad9920998aef1ce41252a61d (equivalent to 20.26.6) or later; regenerate any previously created virtual environments.
How to confirm the fix worked
Confirm installed virtualenv version reports 20.26.6 or newer; inspect generated activation scripts for correctly quoted template replacements and test activation in a controlled environment.
Typical attack path
- Create or tamper with a virtualenv whose activation templates contain malicious unquoted strings
- Distribute or induce the target to use the affected environment
- Victim sources the activation script, triggering command execution
How to detect it
Search shell history and process logs for unexpected commands executed immediately after sourcing activation scripts; examine activation files in virtual environments for anomalous template content or injected payloads.
What your security team should do
- Immediately upgrade all virtualenv installations to the fixed version
- Regenerate virtual environments created with older releases
- Add virtualenv version checks to dependency scanning and CI pipelines
The record
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | virtualenv | 0 | 20.26.6 |
| AlmaLinux:8 | python-nose-docs | 0 | 1.3.7-31.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python-pymongo-doc | 0 | 3.7.0-1.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python-sqlalchemy-doc | 0 | 1.3.2-3.module_el8.10.0+3769+3838165b |
| AlmaLinux:8 | python-virtualenv-doc | 0 | 15.1.0-23.module_el8.10.0+3937+b6a3652f |
| AlmaLinux:8 | python3-PyMySQL | 0 | 0.10.1-2.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-bson | 0 | 3.7.0-1.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-distro | 0 | 1.4.0-2.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-docs | 0 | 3.6.7-2.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-docutils | 0 | 0.14-12.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-nose | 0 | 1.3.7-31.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-pygments | 0 | 2.2.0-22.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-pymongo | 0 | 3.7.0-1.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-pymongo-gridfs | 0 | 3.7.0-1.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-scipy | 0 | 1.0.0-21.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-sqlalchemy | 0 | 1.3.2-3.module_el8.10.0+3769+3838165b |
| AlmaLinux:8 | python3-virtualenv | 0 | 15.1.0-23.module_el8.10.0+3937+b6a3652f |
| AlmaLinux:8 | python3-wheel | 0 | 1:0.31.1-3.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python3-wheel-wheel | 0 | 1:0.31.1-3.module_el8.9.0+3700+efebe9fd |
| AlmaLinux:8 | python36 | 0 | 3.6.8-39.module_el8.10.0+3769+3838165b |
| AlmaLinux:8 | python36-debug | 0 | 3.6.8-39.module_el8.10.0+3769+3838165b |
| AlmaLinux:8 | python36-devel | 0 | 3.6.8-39.module_el8.10.0+3769+3838165b |
| AlmaLinux:8 | python36-rpm-macros | 0 | 3.6.8-39.module_el8.10.0+3769+3838165b |
| Bitnami | virtualenv | 0 | 20.26.6 |
| Chainguard | py3-cassandra-medusa | 0 | 0.23.0-r0 |
| Chainguard | py3-cassandra-medusa-compat | 0 | 0.23.0-r0 |
| Chainguard | request-1276 | 0 | 0.23.0-r0 |
| Chainguard | request-1276-compat | 0 | 0.23.0-r0 |
| Debian:11 | python-virtualenv | 0 | No fix |
| Debian:12 | python-virtualenv | 0 | No fix |
| Debian:13 | python-virtualenv | 0 | 20.26.6+ds-1 |
| Debian:14 | python-virtualenv | 0 | 20.26.6+ds-1 |
| Red Hat:enterprise_linux:8::appstream | python-PyMySQL | 0 | 0:0.10.1-2.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-distro | 0 | 0:1.4.0-2.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-docs | 0 | 0:3.6.7-2.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-docutils | 0 | 0:0.14-12.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-nose | 0 | 0:1.3.7-31.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-nose-docs | 0 | 0:1.3.7-31.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-pygments | 0 | 0:2.2.0-22.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-pymongo | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-pymongo-debuginfo | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-pymongo-debugsource | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-pymongo-doc | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python-sqlalchemy | 0 | 0:1.3.2-3.module+el8.10.0+20981+3704b446 |
| Red Hat:enterprise_linux:8::appstream | python-sqlalchemy-doc | 0 | 0:1.3.2-3.module+el8.10.0+20981+3704b446 |
| Red Hat:enterprise_linux:8::appstream | python-virtualenv | 0 | 0:15.1.0-23.module+el8.10.0+22619+61b70790 |
| Red Hat:enterprise_linux:8::appstream | python-virtualenv-doc | 0 | 0:15.1.0-23.module+el8.10.0+22619+61b70790 |
| Red Hat:enterprise_linux:8::appstream | python-wheel | 0 | 1:0.31.1-3.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-PyMySQL | 0 | 0:0.10.1-2.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-bson | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-bson-debuginfo | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-distro | 0 | 0:1.4.0-2.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-docs | 0 | 0:3.6.7-2.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-docutils | 0 | 0:0.14-12.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-nose | 0 | 0:1.3.7-31.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-pygments | 0 | 0:2.2.0-22.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-pymongo | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-pymongo-debuginfo | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-pymongo-gridfs | 0 | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-scipy | 0 | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-scipy-debuginfo | 0 | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-sqlalchemy | 0 | 0:1.3.2-3.module+el8.10.0+20981+3704b446 |
| Red Hat:enterprise_linux:8::appstream | python3-virtualenv | 0 | 0:15.1.0-23.module+el8.10.0+22619+61b70790 |
| Red Hat:enterprise_linux:8::appstream | python3-wheel | 0 | 1:0.31.1-3.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python3-wheel-wheel | 0 | 1:0.31.1-3.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python36 | 0 | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python36-debug | 0 | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python36-devel | 0 | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | python36-rpm-macros | 0 | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | scipy | 0 | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
| Red Hat:enterprise_linux:8::appstream | scipy-debugsource | 0 | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
| Red Hat:rhel_aus:8.2::appstream | python-PyMySQL | 0 | 0:0.8.0-10.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-distro | 0 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-docs | 0 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-docutils | 0 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-nose | 0 | 0:1.3.7-30.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-nose-docs | 0 | 0:1.3.7-30.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-pygments | 0 | 0:2.2.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-pymongo | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-pymongo-debuginfo | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-pymongo-debugsource | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-pymongo-doc | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-sqlalchemy | 0 | 0:1.3.2-1.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-sqlalchemy-doc | 0 | 0:1.3.2-1.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python-virtualenv | 0 | 0:15.1.0-19.module+el8.2.0+22651+db2d74c8.2 |
| Red Hat:rhel_aus:8.2::appstream | python-virtualenv-doc | 0 | 0:15.1.0-19.module+el8.2.0+22651+db2d74c8.2 |
| Red Hat:rhel_aus:8.2::appstream | python-wheel | 0 | 1:0.31.1-2.module+el8.1.0+3724+3c097090 |
| Red Hat:rhel_aus:8.2::appstream | python3-PyMySQL | 0 | 0:0.8.0-10.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-bson | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-bson-debuginfo | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-distro | 0 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-docs | 0 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-docutils | 0 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-nose | 0 | 0:1.3.7-30.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-pygments | 0 | 0:2.2.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-pymongo | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-pymongo-debuginfo | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-pymongo-gridfs | 0 | 0:3.6.1-11.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-scipy | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-scipy-debuginfo | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-sqlalchemy | 0 | 0:1.3.2-1.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python3-virtualenv | 0 | 0:15.1.0-19.module+el8.2.0+22651+db2d74c8.2 |
| Red Hat:rhel_aus:8.2::appstream | python3-wheel | 0 | 1:0.31.1-2.module+el8.1.0+3724+3c097090 |
| Red Hat:rhel_aus:8.2::appstream | python3-wheel-wheel | 0 | 1:0.31.1-2.module+el8.1.0+3724+3c097090 |
| Red Hat:rhel_aus:8.2::appstream | python36 | 0 | 0:3.6.8-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python36-debug | 0 | 0:3.6.8-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python36-devel | 0 | 0:3.6.8-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | python36-rpm-macros | 0 | 0:3.6.8-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | scipy | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.2::appstream | scipy-debugsource | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python-PyMySQL | 0 | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| Red Hat:rhel_aus:8.4::appstream | python-distro | 0 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python-docs | 0 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python-docutils | 0 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python-nose | 0 | 0:1.3.7-30.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python-nose-docs | 0 | 0:1.3.7-30.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python-pygments | 0 | 0:2.2.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python-pymongo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python-pymongo-debuginfo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python-pymongo-debugsource | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python-pymongo-doc | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python-sqlalchemy | 0 | 0:1.3.2-2.module+el8.4.0+20979+8ba06d83.1 |
| Red Hat:rhel_aus:8.4::appstream | python-sqlalchemy-doc | 0 | 0:1.3.2-2.module+el8.4.0+20979+8ba06d83.1 |
| Red Hat:rhel_aus:8.4::appstream | python-virtualenv | 0 | 0:15.1.0-19.module+el8.4.0+22650+01781d50.3 |
| Red Hat:rhel_aus:8.4::appstream | python-virtualenv-doc | 0 | 0:15.1.0-19.module+el8.4.0+22650+01781d50.3 |
| Red Hat:rhel_aus:8.4::appstream | python-wheel | 0 | 1:0.31.1-2.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python3-PyMySQL | 0 | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| Red Hat:rhel_aus:8.4::appstream | python3-bson | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python3-bson-debuginfo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python3-distro | 0 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python3-docs | 0 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python3-docutils | 0 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python3-nose | 0 | 0:1.3.7-30.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python3-pygments | 0 | 0:2.2.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python3-pymongo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python3-pymongo-debuginfo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python3-pymongo-gridfs | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.4::appstream | python3-scipy | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python3-scipy-debuginfo | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | python3-sqlalchemy | 0 | 0:1.3.2-2.module+el8.4.0+20979+8ba06d83.1 |
| Red Hat:rhel_aus:8.4::appstream | python3-virtualenv | 0 | 0:15.1.0-19.module+el8.4.0+22650+01781d50.3 |
| Red Hat:rhel_aus:8.4::appstream | python3-wheel | 0 | 1:0.31.1-2.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python3-wheel-wheel | 0 | 1:0.31.1-2.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python36 | 0 | 0:3.6.8-2.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python36-debug | 0 | 0:3.6.8-2.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python36-devel | 0 | 0:3.6.8-2.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | python36-rpm-macros | 0 | 0:3.6.8-2.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_aus:8.4::appstream | scipy | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.4::appstream | scipy-debugsource | 0 | 0:1.0.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.6::appstream | python-PyMySQL | 0 | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| Red Hat:rhel_aus:8.6::appstream | python-distro | 0 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.6::appstream | python-docs | 0 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.6::appstream | python-docutils | 0 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.6::appstream | python-nose | 0 | 0:1.3.7-31.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python-nose-docs | 0 | 0:1.3.7-31.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python-pygments | 0 | 0:2.2.0-22.module+el8.5.0+10789+e4939b94 |
| Red Hat:rhel_aus:8.6::appstream | python-pymongo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python-pymongo-debuginfo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python-pymongo-debugsource | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python-pymongo-doc | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python-sqlalchemy | 0 | 0:1.3.2-2.module+el8.6.0+20978+2ad18ee0.1 |
| Red Hat:rhel_aus:8.6::appstream | python-sqlalchemy-doc | 0 | 0:1.3.2-2.module+el8.6.0+20978+2ad18ee0.1 |
| Red Hat:rhel_aus:8.6::appstream | python-virtualenv | 0 | 0:15.1.0-21.module+el8.6.0+22648+901a012d.2 |
| Red Hat:rhel_aus:8.6::appstream | python-virtualenv-doc | 0 | 0:15.1.0-21.module+el8.6.0+22648+901a012d.2 |
| Red Hat:rhel_aus:8.6::appstream | python-wheel | 0 | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python3-PyMySQL | 0 | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| Red Hat:rhel_aus:8.6::appstream | python3-bson | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python3-bson-debuginfo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python3-distro | 0 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.6::appstream | python3-docs | 0 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.6::appstream | python3-docutils | 0 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_aus:8.6::appstream | python3-nose | 0 | 0:1.3.7-31.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python3-pygments | 0 | 0:2.2.0-22.module+el8.5.0+10789+e4939b94 |
| Red Hat:rhel_aus:8.6::appstream | python3-pymongo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python3-pymongo-debuginfo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python3-pymongo-gridfs | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_aus:8.6::appstream | python3-scipy | 0 | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| Red Hat:rhel_aus:8.6::appstream | python3-scipy-debuginfo | 0 | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| Red Hat:rhel_aus:8.6::appstream | python3-sqlalchemy | 0 | 0:1.3.2-2.module+el8.6.0+20978+2ad18ee0.1 |
| Red Hat:rhel_aus:8.6::appstream | python3-virtualenv | 0 | 0:15.1.0-21.module+el8.6.0+22648+901a012d.2 |
| Red Hat:rhel_aus:8.6::appstream | python3-wheel | 0 | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python3-wheel-wheel | 0 | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python36 | 0 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python36-debug | 0 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python36-devel | 0 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | python36-rpm-macros | 0 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat:rhel_aus:8.6::appstream | scipy | 0 | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| Red Hat:rhel_aus:8.6::appstream | scipy-debugsource | 0 | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| Red Hat:rhel_e4s:8.4::appstream | python-PyMySQL | 0 | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| Red Hat:rhel_e4s:8.4::appstream | python-distro | 0 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_e4s:8.4::appstream | python-docs | 0 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_e4s:8.4::appstream | python-docutils | 0 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_e4s:8.4::appstream | python-nose | 0 | 0:1.3.7-30.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_e4s:8.4::appstream | python-nose-docs | 0 | 0:1.3.7-30.module+el8.4.0+15040+36b018e7.1 |
| Red Hat:rhel_e4s:8.4::appstream | python-pygments | 0 | 0:2.2.0-20.module+el8.1.0+3334+5cb623d7 |
| Red Hat:rhel_e4s:8.4::appstream | python-pymongo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_e4s:8.4::appstream | python-pymongo-debuginfo | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_e4s:8.4::appstream | python-pymongo-debugsource | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_e4s:8.4::appstream | python-pymongo-doc | 0 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat:rhel_e4s:8.4::appstream | python-sqlalchemy | 0 | 0:1.3.2-2.module+el8.4.0+20979+8ba06d83.1 |
Related vulnerabilities
- CVE-2026-22702 virtualenv is a tool for creating isolated virtual python environments. Also affects virtualenv
- CVE-2026-34073 cryptography is a package designed to expose cryptographic primitives and recipes to… Also affects py3-cassandra-medusa
- CVE-2026-30922 pyasn1 is a generic ASN.1 library for Python. Also affects py3-cassandra-medusa
- CVE-2026-27448 pyOpenSSL is a Python wrapper around the OpenSSL library. Also affects py3-cassandra-medusa
- CVE-2026-27459 pyOpenSSL is a Python wrapper around the OpenSSL library. Also affects py3-cassandra-medusa
- CVE-2026-32597 PyJWT is a JSON Web Token implementation in Python. Also affects py3-cassandra-medusa
- CVE-2026-26007 cryptography is a package designed to expose cryptographic primitives and recipes to… Also affects py3-cassandra-medusa
- CVE-2026-0994 A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict()… Also affects py3-cassandra-medusa