automatic-goggles (>=0.1.0, <=0.8.0) potentially affected by CVE-2025-12695 via dspy (2.6.8)

dspy PYPI version 2.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on dspy and may be impacted: - automatic-goggles =0.1.0, =0.8.0 Source cves: CVE-2025-12695 Source advisory: OSV:PYSEC-2026-1318...