garmindb (3.2.8), metaflow-card-notebook (>=1.0.2, <=1.0.5) potentially affected by CVE-2025-53000 via nbconvert (6.4.1)

nbconvert PYPI version 6.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - garmindb 3.2.8 - metaflow-card-notebook =1.0.2, =1.0.5 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...