Candidate: CVE-2018-17793 PublicDate: 2018-09-30 19:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17793 https://github.com/pypa/virtualenv/issues/1207 Description: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. Ubuntu-Description: Notes: msalvatore> Upstream has asked MITRE to reject this as not a security vulnerability. Upstream says, "Python in the virtualenv "sandbox" is 0% secure; it's neither designed to nor does it provide any protection against malicious code. You seem very confused about the purpose of virtualenv." https://github.com/pypa/virtualenv/issues/1207#issuecomment-426616819 Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_python-virtualenv: upstream_python-virtualenv: deferred precise/esm_python-virtualenv: DNE trusty_python-virtualenv: ignored (out of standard support) trusty/esm_python-virtualenv: ignored xenial_python-virtualenv: ignored bionic_python-virtualenv: ignored cosmic_python-virtualenv: ignored (reached end-of-life) disco_python-virtualenv: ignored devel_python-virtualenv: ignored