hail (>=0.2.14, <=0.2.64), j11hail (0.2.53) +2 more potentially affected by CVE-2025-55039 via pyspark (2.4.1)

pyspark PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - hail =0.2.14, =0.1.0, =0.1.0, =0.1.4 Source cves: CVE-2025-55039 Source advisory: OSV:GHSA-6P6V-M64V-JX8Q...