gradio-rerun (0.26.0a1), particleanalyzer (>=1.3.2, <=1.3.3) potentially affected by CVE-2026-49119 via gradio (5.47.2)

gradio PYPI version 5.47.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-rerun 0.26.0a1 - particleanalyzer =1.3.2, =1.3.3 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...