spectacle (0.4.1) potentially affected by CVE-2023-41334 via astropy (4.0.0rc2)

astropy PYPI version 4.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - spectacle 0.4.1 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...