Vendors / PrefectHQ Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 5
Exploited now PrefectHQ records in CISA KEV No PrefectHQ vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class.
CVSS 3.0 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01034 · Published 2026-06-20 · Fixed in 3.6.25 CWE-94
Priority HIGH 72
In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00476 · Published 2026-06-02 · Fixed in 3.6.22, 3.6.22.dev7 CWE-863
Priority LOW 38
Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00392 · Published 2023-11-16 · Fixed in 2.16.5 CWE-352
Open these records in search → All records by CVSS severity
3 5 3 1 0
