git-semver (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-100689 via gitpython (2.0.9)

gitpython PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - git-semver =0.1.2, =0.1.5 Source cves: CVE-2026-100689 Source advisory: OSV:GHSA-59CR-6R3X-644W...