{"id":"ROOT-APP-PYPI-CVE-2026-102937","summary":"CVE-2026-102937 in virtualenv - Patched by Root","details":"Root has patched CVE-2026-102937 in the virtualenv package for Root:PyPI. Multiple fixed versions available.","modified":"2026-10-12T17:15:02.919603463Z","published":"2026-10-12T16:33:22Z","upstream":["CVE-2026-102937"],"database_specific":{"severity":"HIGH","source":"Root","distro":"pypi","distro_version":""},"affected":[{"package":{"name":"virtualenv","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.4.3+aikido.1"},{"fixed":"21.3.2+aikido.1"},{"fixed":"20.26.6+aikido.2"},{"fixed":"21.4.2+aikido.1"},{"fixed":"20.34.0+aikido.4"},{"fixed":"20.35.4+aikido.4"},{"fixed":"20.34.0+aikido.5"},{"fixed":"20.36.1+aikido.4"},{"fixed":"20.36.1+aikido.5"},{"fixed":"21.7.4+aikido.1"},{"fixed":"21.6.1+aikido.1"},{"fixed":"21.6.1+aikido.2"},{"fixed":"21.5.1+aikido.2"},{"fixed":"21.7.8+aikido.1"},{"fixed":"20.26.6+aikido.3"},{"fixed":"21.7.8+aikido.2"},{"fixed":"21.7.1+aikido.2"}]}],"database_specific":{"total_fixed_versions":17,"upstream_version":"21.7.1","source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-102937.json","all_fixed_versions":["21.4.3+aikido.1","21.3.2+aikido.1","20.26.6+aikido.2","21.4.2+aikido.1","20.34.0+aikido.4","20.35.4+aikido.4","20.34.0+aikido.5","20.36.1+aikido.4","20.36.1+aikido.5","21.7.4+aikido.1","21.6.1+aikido.1","21.6.1+aikido.2","21.5.1+aikido.2","21.7.8+aikido.1","20.26.6+aikido.3","21.7.8+aikido.2","21.7.1+aikido.2"],"root_patch_version":"aikido.2","root_patched":true}}],"schema_version":"1.9.0"}