Skip to content
OpenAdvisories

Package · PyPI

prefect

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-3514

    Authentication Bypass in prefecthq/prefect

    In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication middleware exempts any URL path ending with 'health' or 'ready'…

    PrefectHQ prefecthq/prefect prefect PyPI
  • High 8.5
    CVE-2026-3515

    Argument Injection in prefecthq/prefect

    A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the `reference` field. The `reference` field is concatenated directly into a `git…

    PrefectHQ prefecthq/prefect prefect PyPI
  • High 7.3
    CVE-2026-7723

    PrefectHQ prefect WebSocket Endpoint in missing authentication

    A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The …

    PrefectHQ Prefect prefect PyPI
  • High 7.6
    CVE-2024-8183

    CORS Misconfiguration in prefecthq/prefect

    A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of co…

    PrefectHQ prefecthq/prefect prefect PyPI
  • High 8.8
    CVE-2023-6022

    Cross-Site Request Forgery (CSRF) in prefecthq/prefect

    Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.

    PrefectHQ prefecthq/prefect prefect PyPI