OPENSUSE-SU-2026:22100-1: python-virtualenv&distro=openSUSE Leap 16.0 openSUSE
Published
Published 14-10-2026Last modified 19-10-2026
Vulnerability summary
OPENSUSE-SU-2026:22100-1 is a vulnerability in python-virtualenv&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 14-10-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
Security update for python-virtualenv This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection (bsc#1283890).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- python-virtualenv&distro=openSUSE Leap 16.0< 20.29.3-160000.4.1
1 vendor · 1 product