ethpm (>=0.1.4a2, <=0.1.4a7), pytest-ethereum (>=0.1.2a2, <=0.1.3a4) +1 more potentially affected by CVE-2025-21607 via vyper (0.5.0b1)

vyper PYPI version 0.5.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on vyper and may be impacted: - ethpm =0.1.4a2, =0.1.2a2, =0.1.2b6, =0.1.2b7 Source cves: CVE-2025-21607 Source advisory: OSV:GHSA-VGF2-GVX8-XWC3...