virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlink_app_data can enable this state even though the command-line flag is disabled for temporary app-data. The resulting environment depends on a cache pathname that its owner no longer controls. This issue is fixed in version 21.14.10.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the
    app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when
    creation finishes. The environment-variable and configuration-file forms of symlink_app_data can enable
    this state even though the command-line flag is disabled for temporary app-data. The resulting environment
    depends on a cache pathname that its owner no longer controls. This issue is fixed in version 21.14.10.
    (CVE-2026-113713)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the     app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when     creation finishes. The environment-variable and configuration-file forms of symlink_app_data can enable     this state even though the command-line flag is disabled for temporary app-data. The resulting environment     depends on a cache pathname that its owner no longer controls. This issue is fixed in version 21.14.10.
    (CVE-2026-113713)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477204	SCA: security update for virtualenv (GHSA-4f8h-vr72-p32c)	Tenable Cloud Security	SCA Checks	Local	medium
477204	SCA: security update for virtualenv (GHSA-4f8h-vr72-p32c)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
371058	Linux Distros Unpatched Vulnerability : CVE-2026-113713	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-113713

medium

Tenable Plugins

medium

medium

medium