instructlab-sdg (>=0.0.1rc1, <=0.0.1) potentially affected by CVE-2026-6855 via instructlab (0.17.2)

instructlab PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on instructlab and may be impacted: - instructlab-sdg =0.0.1rc1, =0.0.1 Source cves: CVE-2026-6855 Source advisory: OSV:PYSEC-2026-2521...