agentos (>=0.1.0, <=0.2.0), symbiont-io-pytest-assembly (>=2.0.2rc0, <=3.1.0.dev4) potentially affected by CVE-2026-114094 via dulwich (0.20.28)

dulwich PYPI version 0.20.28 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - agentos =0.1.0, =2.0.2rc0, =3.1.0.dev4 Source cves: CVE-2026-114094 Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...