ip2geotools (0.1.4), pagarme-surfmappers (>=1.3.3, <=1.4.0) +2 more potentially affected by unknown CVE via bleach (3.0.2)

bleach PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - ip2geotools 0.1.4 - pagarme-surfmappers =1.3.3, =0.1.3, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-GJ48-438W-JH9V...

ip2geotools (0.1.4), pagarme-surfmappers (>=1.3.3, <=1.4.0) +2 more potentially affected by unknown CVE via bleach (3.0.2)

bleach PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - ip2geotools 0.1.4 - pagarme-surfmappers =1.3.3, =0.1.3, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8RFP-98V4-MMR6...

c2cwsgiutils (>=0.29.1, <=1.0.0), cosmicdb (>=0.0.14, <=0.0.24) +7 more potentially affected by CVE-2026-41066 via lxml (4.1.0)

lxml PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - c2cwsgiutils =0.29.1, =0.0.14, =0.4.1.1, =1.0.1, =0.1.0, =1.4.0.dev8, =1.3.5, =1.3.6 Source cves: CVE-2026-41066 Source advisory: OSV:PYSEC-2026-87...

c2cwsgiutils (>=0.29.1, <=1.0.0), cosmicdb (>=0.0.14, <=0.0.24) +7 more potentially affected by CVE-2026-41066 via lxml (4.1.0)

lxml PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - c2cwsgiutils =0.29.1, =0.0.14, =0.4.1.1, =1.0.1, =0.1.0, =1.4.0.dev8, =1.3.5, =1.3.6 Source cves: CVE-2026-41066 Source advisory: OSV:GHSA-VFMQ-68HX-4JF...