castor-extractor (>=0.21.7, <=0.21.9), ledfx (2.0.105) +3 more potentially affected by CVE-2026-59890 via setuptools (75.3.4)

setuptools PYPI version 75.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - castor-extractor =0.21.7, =3.41.0, =0.27.0, =0.1.0, =0.1.6 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...