mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.17.0)

jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...