CVE-2026-72538

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

EUVD-2023-2878

Malicious code in bioql PyPI...

CVE-2023-6022 Cross-Site Request Forgery (CSRF) in prefecthq/prefect

Cross-Site Request Forgery CSRF in GitHub repository prefecthq/prefect prior to 2.16.5...