j5 (0.7.1), zoloto (0.3.0) potentially affected by CVE-2019-16249 via opencv-contrib-python-headless (3.4.18.65)

opencv-contrib-python-headless PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - j5 0.7.1 - zoloto 0.3.0 Source cves: CVE-2019-16249 Source advisory: OSV:PYSEC-2026-726...