biomni-bridge (>=0.3.1, <=0.3.3), github-pr-mcp-server (1.0.3) potentially affected by CVE-2026-49119 via gradio (5.39.0)

gradio PYPI version 5.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - biomni-bridge =0.3.1, =0.3.3 - github-pr-mcp-server 1.0.3 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...