bunnieddpg (0.1.0), pdftotree (>=0.3.0, <=0.4.1) +2 more potentially affected by CVE-2026-9335 via keras (2.0.8)

keras PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bunnieddpg 0.1.0 - pdftotree =0.3.0, =0.1.1, =0.3.4 - yoctol-keras-layer-zoo 0.7.0 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...