edx-prefectutils (>=2.0.1, <=2.3.8) potentially affected by CVE-2026-7725 via prefect (0.15.1)

prefect PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - edx-prefectutils =2.0.1, =2.3.8 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

kitanaqa (0.1.0) potentially affected by CVE-2026-7725 via prefect (0.13.4)

prefect PYPI version 0.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - kitanaqa 0.1.0 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

softpack-builder (0.1.0), softpack-core (0.1.0) potentially affected by CVE-2026-7725 via prefect (2.8.6)

prefect PYPI version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - softpack-builder 0.1.0 - softpack-core 0.1.0 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

ai-24sea (>=0.1.0, <=1.1.1), ai-documentation-writer (>=0.1.0, <=0.1.1) +33 more potentially affected by CVE-2026-7725 via prefect (>=3.0.0rc20, <=3.6.24)

prefect PYPI version =3.0.0rc20, =0.1.0, =0.1.0, =0.16.0, =1.0.1, =2.2.8, =2.25.0rc1, =0.1.31, =1.1.0b2, =1.3.0b5, =0.0.2, =0.1.11, =1.1.0, =3.0.0, =3.3.0 and more Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5) potentially affected by CVE-2026-7725 via prefect (0.14.22)

prefect PYPI version 0.14.22 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cdp-backend =3.0.0.dev4, =3.0.0.dev5 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

archimedes-flow-utils (>=1.0.4, <=1.1.8), archimedes-python-client (>=3.4.0, <=3.8.1) +11 more potentially affected by CVE-2026-7725 via prefect (1.4.1)

prefect PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - archimedes-flow-utils =1.0.4, =3.4.0, =0.1.0, =1.0.21, =0.1.0, =1.0.0, =2.3.9, =0.0.0b1, =0.2.1, =0.0.0, =2021.12.16, =2021.12.17 Source cves:...

orchestration-utils (0.0.1) potentially affected by CVE-2026-7725 via prefect (2.17.1)

prefect PYPI version 2.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - orchestration-utils 0.0.1 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

ert (>=2.37.0, <=5.1.0b1), sagetasks (>=0.1.0a0, <=0.1.0a5) potentially affected by CVE-2026-7725 via prefect (2.0.0b16)

prefect PYPI version 2.0.0b16 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - ert =2.37.0, =0.1.0a0, =0.1.0a5 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

edx-prefectutils (>=1.0.7, <=2.0.0) potentially affected by CVE-2026-7725 via prefect (0.14.5)

prefect PYPI version 0.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - edx-prefectutils =1.0.7, =2.0.0 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

cupyopt (>=0.15.11.1, <=0.15.11.2), exactonline-prefect-tasks (>=0.0.5, <=0.0.26) +6 more potentially affected by CVE-2026-7725 via prefect (0.15.11)

prefect PYPI version 0.15.11 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cupyopt =0.15.11.1, =0.0.5, =0.0.4, =0.0.4, =0.0.2, =0.0.14, =0.0.15 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

cvapipe-analysis (0.1.4) potentially affected by CVE-2026-7725 via prefect (0.14.15)

prefect PYPI version 0.14.15 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cvapipe-analysis 0.1.4 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

GHSA-6RCX-55R6-JX65 Prefect Git Argument Injection in GitRepository Pull Steps

A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component GitRepository Pull Handler. The manipulation of the argument commitsha/directories results in argument injection. It is...

datafetch (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-7725 via prefect (0.14.6)

prefect PYPI version 0.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - datafetch =0.0.1, =0.0.2 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

omnipy (>=0.15.3, <=0.15.12), omnipy-examples (>=0.6.5, <=0.6.8) potentially affected by CVE-2026-7725 via prefect (2.13.8)

prefect PYPI version 2.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omnipy =0.15.3, =0.6.5, =0.6.8 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

omicidx (>=0.9.0.9000, <=1.0.2.0), statline-bq (0.1.0) potentially affected by CVE-2026-7725 via prefect (0.13.19)

prefect PYPI version 0.13.19 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - omicidx =0.9.0.9000, =1.0.2.0 - statline-bq 0.1.0 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

cmip6-downscaling (1.1.1), cupyopt (>=0.15.13.1, <=0.15.13.2) +4 more potentially affected by CVE-2026-7725 via prefect (0.15.13)

prefect PYPI version 0.15.13 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cmip6-downscaling 1.1.1 - cupyopt =0.15.13.1, =0.1.8, =0.1.0, =0.1.10a0 - soam 0.10.2 Source cves: CVE-2026-7725 Source advisory:...

blackmesa-dbt (>=0.1.0, <=0.1.1), ert (2.28.2) +3 more potentially affected by CVE-2026-7725 via prefect (2.20.26)

prefect PYPI version 2.20.26 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - blackmesa-dbt =0.1.0, =0.6.0, =0.5.0, =2.1.12, =2.3.5 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

assemblit (>=0.1.11, <=0.1.13) potentially affected by CVE-2026-7725 via prefect (2.16.6)

prefect PYPI version 2.16.6 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - assemblit =0.1.11, =0.1.13 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7725 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

soam (>=0.3.5, <=0.10.1) potentially affected by CVE-2026-7725 via prefect (0.14.17)

prefect PYPI version 0.14.17 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - soam =0.3.5, =0.10.1 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...