{"api_version":"v1","generated_at":"2026-10-07T14:20:00+00:00","product":{"cve_count":5,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-pypa-virtualenv-8dc0e13d5d86","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/virtualenv","name":"virtualenv","next_cursor":null,"observations":[{"affected":"virtualenv: < 21.7.11","affected_versions_present":true,"cve_id":"CVE-2026-102938","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102938","fixed":"21.7.11.","last_modified":"2026-09-30T19:53:20.817Z","patch_url":"https://github.com/pypa/virtualenv/security/advisories/GHSA-9h9j-4vrj-gf7g","primary_source":"","published":"2026-09-29T20:58:20.696Z"},{"affected":"virtualenv: < 21.7.12","affected_versions_present":true,"cve_id":"CVE-2026-102937","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102937","fixed":"21.7.12.","last_modified":"2026-10-02T12:28:15.446Z","patch_url":"https://github.com/pypa/virtualenv/security/advisories/GHSA-x78j-v8h9-3j2q","primary_source":"","published":"2026-09-29T20:56:13.998Z"},{"affected":"virtualenv: < 21.7.12","affected_versions_present":true,"cve_id":"CVE-2026-102930","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102930","fixed":"21.7.12.","last_modified":"2026-09-30T14:02:24.390Z","patch_url":"https://github.com/pypa/virtualenv/security/advisories/GHSA-94p9-xgh2-xp45","primary_source":"","published":"2026-09-29T20:53:36.018Z"},{"affected":"virtualenv: < 21.7.13","affected_versions_present":true,"cve_id":"CVE-2026-102925","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102925","fixed":"21.7.13.","last_modified":"2026-09-30T19:25:16.653Z","patch_url":"https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2","primary_source":"","published":"2026-09-29T20:50:57.199Z"},{"affected":"< 20.36.1","affected_versions_present":true,"cve_id":"CVE-2026-22702","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22702","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-12T16:44:12.734Z","patch_url":"https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986","primary_source":"","published":"2026-01-10T06:05:53.281Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"pypa"}}