Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: PrefectHQ Component: Prefect Clear all filters
TI-2026-04695 CVE-2026-5366 · GHSA-7pm4-56h2-5rxr

Git Argument Injection in prefecthq/prefect

Priority HIGH 76

Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01034 Published 2026-06-20 Fixed in 3.6.25 CWE-94
TI-2026-03027 CVE-2026-3514 · GHSA-c635-393c-hcx2

Authentication Bypass in prefecthq/prefect

Priority HIGH 72

In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00476 Published 2026-06-02 Fixed in 3.6.22, 3.6.22.dev7 CWE-863