dask-cuda (>=22.8.0a220803, <=22.10.0a220808), devito (>=4.7.0, <=4.7.1) +2 more potentially affected by CVE-2026-23528 via distributed (2022.7.1)

distributed PYPI version 2022.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =22.8.0a220803, =4.7.0, =0.56.0, =1.13.0, =1.14.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...