Skip to content
OpenAdvisories

Package · PyPI

prowler-cloud

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.6
    CVE-2026-100169

    Account pre-hijacking in the Prowler API through email based social account linking without verification

    Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAc…

    Prowler Prowler prowler-cloud PyPI
  • Medium 5.4
    CVE-2026-73262

    Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

    Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_dict and parse_html_string, into generated reports without HTML escaping, allowing a…

    prowler-cloud prowler prowler-cloud prowler PyPI