dask-cuda (>=21.10.0a210924, <=21.12.0a210927), devito (4.6.0) +1 more potentially affected by CVE-2026-23528 via distributed (2021.9.1)

distributed PYPI version 2021.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =21.10.0a210924, =0.0.1, =0.0.48 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...