finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-79720 via netron (8.5.0)

netron PYPI version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - finn-plus 1.2.0 - finn-plus-notebooks =1.3.0, =1.4.0 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...