ROOT-APP-PYPI-CVE-2026-3514 CVE-2026-3514 in rootio-prefect - Patched by Root

Root has patched CVE-2026-3514 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...

ai-24sea (>=0.1.0, <=1.1.1), clerk-sdk (0.1.0) +30 more potentially affected by CVE-2026-3514 via prefect (>=3.0.0rc20, <=3.6.19)

prefect PYPI version =3.0.0rc20, =0.1.0, =1.0.1, =2.2.8, =2.25.0rc1, =0.1.31, =1.1.0b2, =1.3.0b5, =0.0.2, =0.1.11, =1.1.0, =3.0.0, =0.0.2, =0.2.2 and more Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

cmip6-downscaling (1.1.1), cupyopt (>=0.15.13.1, <=0.15.13.2) +4 more potentially affected by CVE-2026-3514 via prefect (0.15.13)

prefect PYPI version 0.15.13 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cmip6-downscaling 1.1.1 - cupyopt =0.15.13.1, =0.1.8, =0.1.0, =0.1.10a0 - soam 0.10.2 Source cves: CVE-2026-3514 Source advisory:...

infractl (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-3514 via prefect (2.13.0)

prefect PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - infractl =0.0.1, =0.0.3 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

edx-prefectutils (>=1.0.7, <=2.0.0) potentially affected by CVE-2026-3514 via prefect (0.14.5)

prefect PYPI version 0.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - edx-prefectutils =1.0.7, =2.0.0 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

abm-colony-collection (>=0.1.0, <=0.5.0), abm-initialization-collection (>=0.1.0, <=0.7.0) +52 more potentially affected by CVE-2026-3514 via prefect (2.82.0)

prefect PYPI version 2.82.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - abm-colony-collection =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0b0, =2.6.0, =0.1.4, =0.1.0, =1.0.2, =2.30.1, =0.1.0, =1.0.0, =4.0.0 and more Source...

omicidx (>=0.9.0.9000, <=1.0.2.0), statline-bq (0.1.0) potentially affected by CVE-2026-3514 via prefect (0.13.19)

prefect PYPI version 0.13.19 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omicidx =0.9.0.9000, =1.0.2.0 - statline-bq 0.1.0 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

simmate (>=0.8.0, <=0.9.0) potentially affected by CVE-2026-3514 via prefect (2.0.4)

prefect PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - simmate =0.8.0, =0.9.0 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

omnipy (>=0.15.3, <=0.15.12), omnipy-examples (>=0.6.5, <=0.6.8) potentially affected by CVE-2026-3514 via prefect (2.13.8)

prefect PYPI version 2.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omnipy =0.15.3, =0.6.5, =0.6.8 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

edx-prefectutils (>=2.0.1, <=2.3.8) potentially affected by CVE-2026-3514 via prefect (0.15.1)

prefect PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - edx-prefectutils =2.0.1, =2.3.8 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

simmate (>=0.7.0, <=0.7.1) potentially affected by CVE-2026-3514 via prefect (2.0.0b8)

prefect PYPI version 2.0.0b8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - simmate =0.7.0, =0.7.1 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

giza-sdk (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-3514 via prefect (2.14.6)

prefect PYPI version 2.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - giza-sdk =0.1.0, =0.1.2 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5) potentially affected by CVE-2026-3514 via prefect (0.14.22)

prefect PYPI version 0.14.22 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cdp-backend =3.0.0.dev4, =3.0.0.dev5 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

mesiqi (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-3514 via prefect (0.15.7)

prefect PYPI version 0.15.7 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - mesiqi =0.0.1, =0.0.2 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

ai-24sea (>=0.1.0, <=1.1.1), clerk-sdk (0.1.0) +30 more potentially affected by CVE-2026-3514 via prefect (>=3.0.0rc20, <=3.6.19)

prefect PYPI version =3.0.0rc20, =0.1.0, =1.0.1, =2.2.8, =2.25.0rc1, =0.1.31, =1.1.0b2, =1.3.0b5, =0.0.2, =0.1.11, =1.1.0, =3.0.0, =0.0.2, =0.2.2 and more Source cves: CVE-2026-3514 Source advisory: GHSA-C635-393C-HCX2...

orchestration-utils (0.0.1) potentially affected by CVE-2026-3514 via prefect (2.17.1)

prefect PYPI version 2.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - orchestration-utils 0.0.1 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

archimedes-flow-utils (>=1.0.4, <=1.1.8), archimedes-python-client (>=3.4.0, <=3.8.1) +11 more potentially affected by CVE-2026-3514 via prefect (1.4.1)

prefect PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - archimedes-flow-utils =1.0.4, =3.4.0, =0.1.0, =1.0.21, =0.1.0, =1.0.0, =2.3.9, =0.0.0b1, =0.2.1, =0.0.0, =2021.12.16, =2021.12.17 Source cves:...

CVE-2026-3514

creationtimestamp| type| source ---|---|--- 2026-06-02 09:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncc22cyky27 2026-06-04 09:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnhb6gfwns2p...

cvapipe-analysis (0.1.4) potentially affected by CVE-2026-3514 via prefect (0.14.15)

prefect PYPI version 0.14.15 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cvapipe-analysis 0.1.4 Source cves: CVE-2026-3514 Source advisory: OSV:PYSEC-2026-2261...

kitanaqa (0.1.0) potentially affected by CVE-2026-3514 via prefect (0.13.4)

prefect PYPI version 0.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - kitanaqa 0.1.0 Source cves: CVE-2026-3514 Source advisory: OSV:PYSEC-2026-2261...