colusa (0.11.0), tycho-api (>=0.0.0.dev0, <=1.13.0a1.dev3) potentially affected by CVE-2022-40897 via setuptools (60.9.2)

setuptools PYPI version 60.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colusa 0.11.0 - tycho-api =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...