AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Prefect security advisories

9 advisories · 3 critical or high in 12 months · latest Jun 20

Repository

9 advisories

Critical 9.9Jun 20Prefect: remote code executionCVE-2026-5366fixed in 3.6.25High 7.5Jun 2Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready'CVE-2026-3514fixed in 3.6.22.dev7High 8.5May 26Prefect has an Argument Injection issueCVE-2026-3515no fix yetLow 6.3May 4Prefect Git Argument Injection in GitRepository Pull StepsCVE-2026-7725fixed in 3.6.25.dev7Medium 5.3May 4Prefect Auth Bypass via endswith() Health Check ExemptionCVE-2026-7722fixed in 3.6.22Medium 7.3May 4Prefect Unauthenticated Event Injection via /api/events/in WebSocketCVE-2026-7723fixed in 3.6.14Low 5.0May 4Prefect SSRF Bypass via DNS Rebinding in validate_restricted_urlCVE-2026-7724fixed in 3.6.28.dev2High 7.6Mar 20, 2025Prefect CORS (Cross-Origin Resource Sharing) misconfigurationCVE-2024-8183fixed in 2.20.17 +1High 8.8Nov 16, 2023Cross-Site Request Forgery vulnerability in PrefectCVE-2023-6022fixed in 2.16.5
About Prefect

Workflow orchestration in Python.

Packages watched: prefect (PyPI).

PrefectHQ/prefectOn ReposPrefect

Prefect elsewhere on Ibis: Paydays · Releases · Repos