optimizo (>=1.2.0, <=1.3.0), pencil-pusher (1.6.1) potentially affected by CVE-2026-102937 via virtualenv (20.4.7)

virtualenv PYPI version 20.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - optimizo =1.2.0, =1.3.0 - pencil-pusher 1.6.1 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

optimizo (>=1.2.0, <=1.3.0), pencil-pusher (1.6.1) potentially affected by CVE-2026-102938 via virtualenv (20.4.7)

virtualenv PYPI version 20.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - optimizo =1.2.0, =1.3.0 - pencil-pusher 1.6.1 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...