invenio-accounts (>=1.0.0a1, <=1.0.0a5), python-database-rest-logging (>=1.0.2, <=1.0.5) potentially affected by CVE-2021-23385 via flask-security (1.7.5)

flask-security PYPI version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security and may be impacted: - invenio-accounts =1.0.0a1, =1.0.2, =1.0.5 Source cves: CVE-2021-23385 Source advisory: OSV:PYSEC-2026-809...