17 Total advisories
17 Vulnerabilities
0 Malware
Dependency scanning
Check whether prefect is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CRITICAL 9.9
CVE-2026-5366
Prefect has Git Flag Injection via commit_sha and directories Parameters Leading to Remote Code Execution (RCE)
HIGH 7.5
CVE-2026-3514
Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready'
HIGH 7.3
CVE-2026-7723
Prefect Unauthenticated Event Injection via /api/events/in WebSocket
HIGH 8.5
CVE-2026-3515
Prefect has an Argument Injection issue
MEDIUM 5.0
CVE-2026-7724
Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
MEDIUM 5.3
CVE-2026-7722
Prefect Auth Bypass via endswith() Health Check Exemption
MEDIUM 6.3
CVE-2026-7725
Prefect Git Argument Injection in GitRepository Pull Steps
HIGH 8.8
CVE-2023-6022
Cross-Site Request Forgery vulnerability in Prefect
HIGH 7.5
CVE-2026-3514
CVE-2026-3514
MEDIUM 5.0
CVE-2026-7724
Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
HIGH 8.5
CVE-2026-3515
Prefect has an Argument Injection issue
MEDIUM 5.3
CVE-2026-7722
Prefect Auth Bypass via endswith() Health Check Exemption
HIGH 7.3
CVE-2026-7723
Prefect Unauthenticated Event Injection via /api/events/in WebSocket
MEDIUM 6.3
CVE-2026-7725
Prefect Git Argument Injection in GitRepository Pull Steps
HIGH 7.6
CVE-2024-8183
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
HIGH 7.6
CVE-2024-8183
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
HIGH 8.8
CVE-2023-6022
Cross-Site Request Forgery vulnerability in Prefect
Browse more PyPI advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes