pkg:PyPI/prefect

All known vulnerabilities

• HIGH8.8CVE-2023-6022Cross-Site Request Forgery vulnerability in Prefect
  >= 2.0.0, < 2.16.5
• HIGH7.6CVE-2024-8183Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
  >= 3.0.0rc1, < 3.0.3
• HIGH7.3CVE-2026-7723Prefect Unauthenticated Event Injection via /api/events/in WebSocket
  from 0, < 3.6.14
• MEDIUM6.3Prefect Git Argument Injection in GitRepository Pull Steps
  from 0, < 3.6.25.dev7
• MEDIUM5.3Prefect Auth Bypass via endswith() Health Check Exemption
  from 0, < 3.6.22
• MEDIUM5.0Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
  from 0, < 3.6.28.dev2