coinlib (>=1.0.6, <=1.0.7), wave-api (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-4565 via protobuf (3.15.3)

protobuf PYPI version 3.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - coinlib =1.0.6, =0.1.0, =0.1.2 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

coinlib (>=1.0.6, <=1.0.7), wave-api (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-0994 via protobuf (3.15.3)

protobuf PYPI version 3.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - coinlib =1.0.6, =0.1.0, =0.1.2 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...