medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-31221 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3972...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-58659 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3624...

geotils (0.3.0.post2), satseg (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1, <=0.5.2)

torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: OSV:GHSA-GHQ9-VC6F-8QJF...

geotils (0.3.0.post2), satseg (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1, <=0.5.2)

torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: OSV:PYSEC-2024-204...

geotils (0.3.0.post2), satseg (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1, <=0.5.2)

torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: MEND:CVE-2024-49048...