Vulnerabilities
Patch virtualenv to stop arbitrary command execution in bash prompts
A high-severity flaw in virtualenv allows attackers to run shell commands via crafted environment names, requiring users to update to 21.14.7 immediately.
Python
Everything BlueTeam Herald has reported about Python: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Install Mercury 3.2.6 to stop anonymous users from running arbitrary Python code via exposed servers
Default tokenless deployments of the Mercury framework allow anonymous users to create Jupyter kernels and run arbitrary Python code on exposed servers.