coinsta (>=0.1.5, <=0.1.6), cricket-rankings (>=1.0.1, <=1.0.3) +1 more potentially affected by CVE-2026-41066 via lxml (4.2.2)

lxml PYPI version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - coinsta =0.1.5, =1.0.1, =1.0.3 - onelogin 1.4.0 Source cves: CVE-2026-41066 Source advisory: OSV:PYSEC-2026-87...