Sploitus

CVE-2024-53899

No indexed exploits for CVE-2024-53899 yet

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

Affected products
Alt Linux, Almalinux, Centos, Debian, Linuxmint, Red Hat, Red Os, Rocky Linux
Virtualenv
< 20.26.6
Fix
Available
CVSS 3.1
8.4 HIGH
EPSS
1.6% (73th percentile)
Weakness
CWE-78, CWE-77
NVD status
Analyzed
Published
2024-11-24
CVE-2024-53899 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2024-53899 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2024-53899 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.