Root has patched GHSA-58pv-8j8x-9vj2 in the rootio-jaraco.context package for Root:PyPI. Multiple fixed versions available.
{ "distro": "pypi", "source": "Root", "distro_version": "" }
3.0
"https://api.root.io/external/osv/ROOT-APP-PYPI-GHSA-58pv-8j8x-9vj2.json"
"root.io.2"
[ "5.3.0+root.io.1", "6.0.1+root.io.1", "5.3.0+root.io.2" ]
true
"5.3.0"