Skip to content

Update virtualenv to min. 20.36.1 - #3745

Closed
nkaaf wants to merge 1 commit into
pre-commit:mainfrom
nkaaf:virtualenv-version-bump-toctou
Closed

Update virtualenv to min. 20.36.1#3745
nkaaf wants to merge 1 commit into
pre-commit:mainfrom
nkaaf:virtualenv-version-bump-toctou

Conversation

@nkaaf

@nkaaf nkaaf commented Aug 15, 2026

Copy link
Copy Markdown

This version update fixes the disclosed TOCTOU vulnerability of virtualenv (GHSA-597g-3phw-6986).

@asottile

Copy link
Copy Markdown
Member

pre-commit works with any version above the one listed. there's no reason to change the minimum

@asottile asottile closed this Aug 15, 2026
@nkaaf
nkaaf deleted the virtualenv-version-bump-toctou branch August 15, 2026 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants