Skip to content

Vulnerabilities of prefecthq prefecthq/prefect

Is your version affected?

CVE Summary Score Published
CVE-2026-5366 Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the… 9.9 Critical Jun 20, 2026
CVE-2026-3514 In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of… 7.5 High Jun 2, 2026
CVE-2026-3515 A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows… 8.5 High May 24, 2026
CVE-2024-8183 A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized… 7.6 High Mar 20, 2025
CVE-2023-6022 Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5 8.8 High Nov 16, 2023

Other prefecthq products