bespokelabs-curator (>=0.1.15rc1, <=0.1.15.post1), cornell (1.1.1) +21 more potentially affected by unknown CVE via vcrpy (7.0.0)

vcrpy PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - bespokelabs-curator =0.1.15rc1, =1.0.0, =0.2.16, =0.1.1, =0.1.19, =0.1.9, =0.1.0, =0.2.4rc2, =0.3.22, =2.1.0, =0.1.0, =0.0.1, =1.0.2 and more Source...