Hello,
Not really a proxmox issue and maybe v7 only.
I have a Debian/Proxmox setup on which I have debsecan making daily report of packages that are vulnerable/fixed/can be patched.
Example partial output
but those are patched, just that the patchset ended with proxmox (+pmx) and not debian...