chariots (0.2.4), create-aio-app (0.0.9) +7 more potentially affected by CVE-2022-24065 via cookiecutter (1.7.0)

cookiecutter PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on cookiecutter and may be impacted: - chariots 0.2.4 - create-aio-app 0.0.9 - fluxio-parser 0.1.0 - kedro-airflow =0.2.1, =20.1.15, =0.1.4, =0.5.0rc0, =0.1.1, =0.1.7 Source...