HIGH8.8CVE-2023-6022Cross-Site Request Forgery vulnerability in Prefect >= 2.0.0, < 2.16.5
HIGH8.8CVE-2023-6022Cross-Site Request Forgery vulnerability in Prefect >= 2.0.0, < 2.16.5
from 0, <= 3.6.18
HIGH8.5Prefect has an Argument Injection issue
from 0, <= 3.6.18
HIGH7.6Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
>= 3.0.0rc1, < 3.0.3
HIGH7.6Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
from 0, < 2.20.17, >= 3.0.0rc1, < 3.0.3
HIGH7.5Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready'
from 0, < 3.6.22
HIGH7.3Prefect Unauthenticated Event Injection via /api/events/in WebSocket
from 0, < 3.6.14
HIGH7.3Prefect Unauthenticated Event Injection via /api/events/in WebSocket
from 0, < 3.6.14
MEDIUM6.3Prefect Git Argument Injection in GitRepository Pull Steps
from 0, < 3.6.25.dev7
MEDIUM6.3Prefect Git Argument Injection in GitRepository Pull Steps
from 0, < 3.6.25.dev7
MEDIUM5.3Prefect Auth Bypass via endswith() Health Check Exemption
from 0, < 3.6.22
MEDIUM5.3Prefect Auth Bypass via endswith() Health Check Exemption
from 0, < 3.6.22
MEDIUM5.0Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
from 0, < 3.6.28.dev2
MEDIUM5.0Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
from 0, < 3.6.28.dev2