aioambient (1.0.2), firex-flame (>=2.1.0, <=2.5.35) +2 more potentially affected by CVE-2026-48809 via python-engineio (3.10.0)

python-engineio PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.0.2 - firex-flame =2.1.0, =2.2.3, =2.2.3, =2.3.5 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...