unicef-hope-aurora (>=1.7.0.dev639, <=1.7.0rc1) potentially affected by CVE-2025-13030 via django-mdeditor (0.1.20)

django-mdeditor PYPI version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on django-mdeditor and may be impacted: - unicef-hope-aurora =1.7.0.dev639, =1.7.0rc1 Source cves: CVE-2025-13030 Source advisory: SNYK:PYTHON-DJANGOMDEDITOR-8630926...