doc(python-3.10): Add pending-upstream-fix CVE-2025-13836

Waiting on python/cpython#142142 to merge

Signed-off-by: Vivian Rook <vivian.rook@chainguard.dev>

Author: Vivian Rook

python-3.10.advisories.yaml

@@ -146,6 +146,10 @@ advisories:
             componentType: apk
             componentLocation: /.PKGINFO
             scanner: grype
+      - timestamp: 2025-12-08T15:00:40Z
+        type: pending-upstream-fix
+        data:
+          note: 'Upstream are actively working on, and have a PR open regarding this issue. Upstream maintainers will need to approve and merge the PR.  Fix PR: https://github.com/python/cpython/pull/142142'
 
   - id: CGA-6xpf-gwq5-cp42
     aliases: