pickley (1.9.19), thaispoon (0.0.1) potentially affected by CVE-2026-102937 via virtualenv (16.7.7)

virtualenv PYPI version 16.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley 1.9.19 - thaispoon 0.0.1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...