eflow (0.1.3) potentially affected by CVE-2026-40171 via jupyterlab (1.1.4)

jupyterlab PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - eflow 0.1.3 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...