597 matches found
prefect-cve-2026-5366
PoC: CVE-2026-5366 - Git Argument Injection in Prefect GitRepository Vulnerability: git argument injection leading to RCE via commitsha plus argument injection via directories Version: vulnerable in 3.6.23, fixed in 3.6.25+ File: src/prefect/runner/storage.py Huntr:...
CLEANSTART-2026-UT67771 Security fix for GHSA-65pc-fj4g-8rjx applied in: py3.12-prefect 1.4.1-r0, py3.11-prefect 0.15.13-r0
GHSA-65pc-fj4g-8rjx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UC09362 Security fix for GHSA-qccp-gfcp-xxvc applied in: py3.12-prefect 1.4.1-r0, py3.11-prefect 0.15.13-r0
GHSA-qccp-gfcp-xxvc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-IP64770 Security fix for GHSA-mf9v-mfxr-j63j applied in: py3.12-prefect 1.4.1-r0, py3.11-prefect 0.15.13-r0
GHSA-mf9v-mfxr-j63j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
acryl-datahub-actions (>=1.5.0.1, <=1.7.0rc2), acryl-datahub-airflow-plugin (>=1.5.0.10, <=1.7.0rc2) +7 more potentially affected by CVE-2026-50775 via acryl-datahub (>=1.5.0.1, <=1.7.0rc2)
acryl-datahub PYPI version =1.5.0.1, =1.5.0.1, =1.5.0.10, =0.3.17.1rc5, =1.5.0.10, =1.5.0.10, =1.5.0.1, =0.1.0, =1.5.0.1, =1.7.0rc2 Source cves: CVE-2026-50775 Source advisory: MEND:CVE-2026-50775...
CVE-2026-72538
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
EUVD-2026-56008
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538
CVE-2026-72538 affects PrefectHQ Prefect up to version 3.8.2. An argument injection flaw occurs in the git_clone pull step where the branch field is passed directly to git pull without sanitization, enabling an authenticated user to achieve remote code execution on the Prefect server. The issue i...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538: Improper Neutralization of Argument Delimiters in a Command
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
PT-2026-70113
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. Thi...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: azureml-inference-server-http, datadog-agent, openstack-tempest-2025.2, openstack-glance-2025.1, vllm-openai-cuda-12.9, openstack-keystone-2025.1, openstack-placement-2025.2, openstack-tempest-2026.1, openstack-nova-2025.2, vllm-openai-cuda-13.0, vllm-cuda-13.2,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: azureml-inference-server-http, datadog-agent, openstack-tempest-2025.2, openstack-glance-2025.1, vllm-openai-cuda-12.9, openstack-keystone-2025.1, openstack-placement-2025.2, openstack-tempest-2026.1, openstack-nova-2025.2, vllm-openai-cuda-13.0, vllm-cuda-13.2,...
Prefect - Detect
Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines.""" from kittysploit import from...