pab (>=2.5.5, <=2.8.1), poetry-alias (0.1.0) +2 more potentially affected by CVE-2026-41140 via poetry (1.2.0b3)

poetry PYPI version 1.2.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - pab =2.5.5, =2.8.1 - poetry-alias 0.1.0 - poetry-plugin-export 1.0.5 - poetry-scaffold-plugin 0.1.0 Source cves: CVE-2026-41140 Source advisory:...