insta360-gfpt (>=0.1.6, <=0.2.0), systembridgebackend (>=3.4.4, <=3.4.7.dev1) +2 more potentially affected by CVE-2025-59042 via pyinstaller (5.3.0)

pyinstaller PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - insta360-gfpt =0.1.6, =3.4.4, =3.4.4, =3.4.4, =3.4.7.dev1 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

insta360-gfpt (>=0.1.6, <=0.2.0) potentially affected by CVE-2026-47104 via libusb (1.0.24b3)

libusb PYPI version 1.0.24b3 is affected by a known vulnerability. The following packages have a transitive dependency on libusb and may be impacted: - insta360-gfpt =0.1.6, =0.2.0 Source cves: CVE-2026-47104 Source advisory: OSV:PYSEC-2026-3979...

insta360-gfpt (>=0.1.6, <=0.2.0) potentially affected by CVE-2026-23679 via libusb (1.0.24b3)

libusb PYPI version 1.0.24b3 is affected by a known vulnerability. The following packages have a transitive dependency on libusb and may be impacted: - insta360-gfpt =0.1.6, =0.2.0 Source cves: CVE-2026-23679 Source advisory: OSV:PYSEC-2026-3978...