CGA-5fpq-mrmv-5m4w

This CVE is introduced by a transitive dependency on wandb. There is an open and active PR to remediate it upstream, which can be found here: https://github.com/wandb/wandb/pull/9582. Once the PR passes tests and is approved by maintainers, the fix will be implemented.