carte-blanche (>=1.3.7, <=1.3.8), dop-python-pip-package (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2025-71176 via pytest (3.7.2)

pytest PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - carte-blanche =1.3.7, =0.0.1, =2.0.3, =2.0.6 - seleniumbase 1.14.6 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...