instructlab-sdg (>=0.0.1 <=0.0.1rc4) potentially affected by CVE-2026-6859 via instructlab (=0.17.2)

instructlab PYPI version =0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on instructlab and may be impacted: - instructlab-sdg =0.0.1, =0.0.1rc4 Source cves: CVE-2026-6859 Source advisory: SNYK:PYTHON-INSTRUCTLAB-16323407...

CVE-2026-6859

creationtimestamp| type| source ---|---|--- 2026-04-22 14:03:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116448728591423410 2026-04-22 14:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3omhcshf2e 2026-04-22 15:17:58+00:00| published-proof-of-concept|...