sonagent (>=1.0.0, <=1.0.9) potentially affected by CVE-2026-25592 via semantic-kernel (0.4.5.dev0)

semantic-kernel PYPI version 0.4.5.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - sonagent =1.0.0, =1.0.9 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...