591 matches found
prefect-cve-2026-5366
PoC: CVE-2026-5366 - Git Argument Injection in Prefect GitRepository Vulnerability: git argument injection leading to RCE via commitsha plus argument injection via directories Version: vulnerable in 3.6.23, fixed in 3.6.25+ File: src/prefect/runner/storage.py Huntr:...
acryl-datahub-actions (>=1.5.0.1, <=1.7.0rc2), acryl-datahub-airflow-plugin (>=1.5.0.10, <=1.7.0rc2) +7 more potentially affected by CVE-2026-50775 via acryl-datahub (>=1.5.0.1, <=1.7.0rc2)
acryl-datahub PYPI version =1.5.0.1, =1.5.0.1, =1.5.0.10, =0.3.17.1rc5, =1.5.0.10, =1.5.0.10, =1.5.0.1, =0.1.0, =1.5.0.1, =1.7.0rc2 Source cves: CVE-2026-50775 Source advisory: MEND:CVE-2026-50775...
CVE-2026-72538
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538
CVE-2026-72538 affects PrefectHQ Prefect up to version 3.8.2. An argument injection flaw occurs in the git_clone pull step where the branch field is passed directly to git pull without sanitization, enabling an authenticated user to achieve remote code execution on the Prefect server. The issue i...
EUVD-2026-56008
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538: Improper Neutralization of Argument Delimiters in a Command
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
PT-2026-70113
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. Thi...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: azureml-inference-server-http, prefect, airflow, mitmproxy, semgrep, ansible-operator-fips, openstack-tempest-2025.2, ggshield, gitlab-cng-fips, openstack-placement-2025.1, openstack-kolla-toolbox-2025.1, openstack-glance-2025.1, datadog-agent,...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: azureml-inference-server-http, prefect, airflow, mitmproxy, semgrep, ansible-operator-fips, openstack-tempest-2025.2, ggshield, gitlab-cng-fips, openstack-placement-2025.1, openstack-kolla-toolbox-2025.1, openstack-glance-2025.1, datadog-agent,...
Prefect - Detect
Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines.""" from kittysploit import from...
ROOT-APP-PYPI-CVE-2026-3514 CVE-2026-3514 in rootio-prefect - Patched by Root
Root has patched CVE-2026-3514 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-3515 CVE-2026-3515 in rootio-prefect - Patched by Root
Root has patched CVE-2026-3515 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-7723 CVE-2026-7723 in rootio-prefect - Patched by Root
Root has patched CVE-2026-7723 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-7722 CVE-2026-7722 in rootio-prefect - Patched by Root
Root has patched CVE-2026-7722 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2026-59890 via setuptools (54.2.0)
setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...
cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5) potentially affected by CVE-2026-3515 via prefect (0.14.22)
prefect PYPI version 0.14.22 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cdp-backend =3.0.0.dev4, =3.0.0.dev5 Source cves: CVE-2026-3515 Source advisory: OSV:PYSEC-2026-2957...