pickley (3.0.5) potentially affected by CVE-2026-102925 via virtualenv (20.7.1)

virtualenv PYPI version 20.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley 3.0.5 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...