EUVD-2026-56008

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

PT-2026-70113

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. Thi...

abm-colony-collection (>=0.1.0, <=0.5.0), abm-initialization-collection (>=0.1.0, <=0.7.0) +124 more potentially affected by CVE-2026-5366 via prefect (>=0.9.2, <=3.6.24)

prefect PYPI version =0.9.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.16.0, =0.0.126, =0.1.0, =1.0.4, =3.4.0, =0.4.0b0, =0.1.11, =0.1.0, =0.5.0 and more Source cves: CVE-2026-5366 Source advisory: SNYK:PYTHON-PREFECT-17824489...

abm-colony-collection (>=0.1.0, <=0.5.0), abm-initialization-collection (>=0.1.0, <=0.7.0) +124 more potentially affected by CVE-2026-5366 via prefect (>=0.9.2, <=3.6.24)

prefect PYPI version =0.9.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.16.0, =0.0.126, =0.1.0, =1.0.4, =3.4.0, =0.4.0b0, =0.1.11, =0.1.0, =0.5.0 and more Source cves: CVE-2026-5366 Source advisory: MEND:CVE-2026-5366...