datapipe-label-studio-lite (>=0.2.0, <=0.3.3) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.16)

label-studio-sdk PYPI version 0.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - datapipe-label-studio-lite =0.2.0, =0.3.3 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

berrydb (>=1.0.9, <=1.5.1), datapipe-label-studio-lite (>=0.2.0, <=0.3.3) +3 more potentially affected by CVE-2025-25295 via label-studio-sdk (>=0.0.1, <=1.0.8)

label-studio-sdk PYPI version =0.0.1, =1.0.9, =0.2.0, =0.5.11, =1.13.0, =0.0.15, =1.0.0 Source cves: CVE-2025-25295 Source advisory: MEND:CVE-2025-25295...

datapipe-label-studio-lite (>=0.2.0, <=0.3.3) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.16)

label-studio-sdk PYPI version 0.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - datapipe-label-studio-lite =0.2.0, =0.3.3 Source cves: CVE-2025-25295 Source advisory: OSV:GHSA-RGV9-W7JP-M23G...