PYSEC-2026-2261

In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication middleware exempts any URL path ending with 'health' or 'ready' from authentication checks. This allo...

Malicious code in whatsapp-flows-endpoint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c4ee7de20264bab033d4f4b998239b7301103ee91c1fc460817aef7cf14ab24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...