aos-signer (>=1.6.1, <=1.8.0), cl-sii (>=0.11.1, <=0.26.0) +10 more potentially affected by CVE-2025-48994 via signxml (3.2.2)

signxml PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on signxml and may be impacted: - aos-signer =1.6.1, =0.11.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.7.0, =0.9.6, =8.0.2, =9.1.2 Source cves: CVE-2025-48994 Source advisory:...