clover-synth (0.1.0), coliseum (1.0.5) +5 more potentially affected by CVE-2025-71176 via pytest (8.0.0rc2)

pytest PYPI version 8.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - clover-synth 0.1.0 - coliseum 1.0.5 - muograph =0.1.6, =2.1.0, =0.7.4, =0.12.1 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...