cvxpy (>=1.1.22, <=1.3.0), cvxpy-base (>=1.1.22, <=1.3.0) +3 more potentially affected by CVE-2026-59890 via setuptools (64.0.2)

setuptools PYPI version 64.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvxpy =1.1.22, =1.1.22, =0.0.0, =0.2.0, =0.2.3 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...