aio-nxapi (>=0.1.0, <=0.3.0), basketball-reference-web-scraper (>=4.9.4, <=4.13.0) +19 more potentially affected by CVE-2026-41066 via lxml (4.5.1)

lxml PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - aio-nxapi =0.1.0, =4.9.4, =2020.6.3, =3.13.0, =3.7.0, =1.1.5, =2.1.0, =2020.6.3, =2.22.0, =0.1.8, =0.1.5, =3.0.0, =3.0.1 and more Source cves:...

aioiliad (0.3.1), ansible-playbook-grapher (>=0.8.0, <=0.9.2) +23 more potentially affected by CVE-2026-41066 via lxml (4.2.5)

lxml PYPI version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - aioiliad 0.3.1 - ansible-playbook-grapher =0.8.0, =4.4.1, =0.3.2, =1.2.0, =1.0.0a201811211534, =0.4.1, =0.3.0, =0.9.0, =0.1.1, =1.0.0, =1.0.2 and more...