aio-nxapi (>=0.1.0, <=0.3.0), basketball-reference-web-scraper (>=4.9.4, <=4.13.0) +19 more potentially affected by CVE-2026-41066 via lxml (4.5.1)

lxml PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - aio-nxapi =0.1.0, =4.9.4, =2020.6.3, =3.13.0, =3.7.0, =1.1.5, =2.1.0, =2020.6.3, =2.22.0, =0.1.8, =0.1.5, =3.0.0, =3.0.1 and more Source cves:...