Root has patched CVE-2026-32274 in the rootio-black package for Root:PyPI. Multiple fixed versions available.
{
"source": "Root",
"distro": "pypi",
"distro_version": ""
}[
"26.1.0+root.io.1",
"25.9.0+root.io.1",
"25.9.0+root.io.2",
"24.4.2+root.io.1",
"24.10.0+root.io.1",
"25.11.0+root.io.1"
]
"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-32274.json"
"25.11.0"
true
"root.io.1"
6.0