signxml (>=0.4.2, <=0.4.4) potentially affected by CVE-2026-69248 via cryptography (0.9.3)

cryptography PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - signxml =0.4.2, =0.4.4 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...