colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2026-59890 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...