Prefect Prefect
3 CVEs affecting Prefect Prefect. Latest disclosed: 2026-06-20. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-5366 | Critical | 9.9 | 2026-06-20 | Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `comm… |
CVE-2023-6022 | High | 8.8 | 2023-11-16 | Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5. |
CVE-2026-3514 | High | 7.5 | 2026-06-02 | In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check prob… |