arctic-ai (0.1.0), devito (4.8.0) +1 more potentially affected by CVE-2026-23528 via distributed (2023.2.1)

distributed PYPI version 2023.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - arctic-ai 0.1.0 - devito 4.8.0 - nwp-consumer =0.0.1, =0.1.23 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...