cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5) potentially affected by CVE-2026-3515 via prefect (0.14.22)

prefect PYPI version 0.14.22 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cdp-backend =3.0.0.dev4, =3.0.0.dev5 Source cves: CVE-2026-3515 Source advisory: OSV:PYSEC-2026-2957...