wagtail-whoosh (>=0.2.1, <=0.2.3) potentially affected by CVE-2026-55468 via wagtail (2.5.0)

wagtail PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-whoosh =0.2.1, =0.2.3 Source cves: CVE-2026-55468 Source advisory: OSV:PYSEC-2026-3939...