ducktape (0.7.16), gym-simplifiedtetris-avela (0.1.6) +3 more potentially affected by CVE-2026-113717 via virtualenv (20.16.2)

virtualenv PYPI version 20.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ducktape 0.7.16 - gym-simplifiedtetris-avela 0.1.6 - pgsync =2.4.0, =1.66.5, =2.3.3 Source cves: CVE-2026-113717 Source advisory:...