viadot2 (>=2.2.9, <=2.2.20) potentially affected by CVE-2024-8183 via prefect (3.0.0rc20)

prefect PYPI version 3.0.0rc20 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - viadot2 =2.2.9, =2.2.20 Source cves: CVE-2024-8183 Source advisory: GHSA-4V9F-R55G-G6HC...

viadot2 (>=2.2.9, <=2.2.20) potentially affected by CVE-2024-8183 via prefect (3.0.0rc20)

prefect PYPI version 3.0.0rc20 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - viadot2 =2.2.9, =2.2.20 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

datafetch (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-8183 via prefect (0.14.6)

prefect PYPI version 0.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - datafetch =0.0.1, =0.0.2 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

cdp-backend (>=3.0.0.dev4, <=3.0.0.dev5) potentially affected by CVE-2024-8183 via prefect (0.14.22)

prefect PYPI version 0.14.22 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cdp-backend =3.0.0.dev4, =3.0.0.dev5 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

aporacle (>=0.0.126, <=0.0.143), assemblit (>=0.1.11, <=0.1.13) +16 more potentially affected by CVE-2024-8183 via prefect (>=2.0.0b8, <=2.19.4)

prefect PYPI version =2.0.0b8, =0.0.126, =0.1.11, =5.3.0, =2.37.0, =0.1.0, =0.0.1, =0.3.2, =0.0.217, =0.1.1, =0.0.5, =0.15.3, =0.6.5, =1.0.4, =0.1.0a0, =0.1.0a5 and more Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

archimedes-flow-utils (>=1.0.4, <=1.1.8), archimedes-python-client (>=3.4.0, <=3.8.1) +11 more potentially affected by CVE-2024-8183 via prefect (1.4.1)

prefect PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - archimedes-flow-utils =1.0.4, =3.4.0, =0.1.0, =1.0.21, =0.1.0, =1.0.0, =2.3.9, =0.0.0b1, =0.2.1, =0.0.0, =2021.12.16, =2021.12.17 Source cves:...

cmip6-downscaling (1.1.1), cupyopt (>=0.15.13.1, <=0.15.13.2) +4 more potentially affected by CVE-2024-8183 via prefect (0.15.13)

prefect PYPI version 0.15.13 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cmip6-downscaling 1.1.1 - cupyopt =0.15.13.1, =0.1.8, =0.1.0, =0.1.10a0 - soam 0.10.2 Source cves: CVE-2024-8183 Source advisory:...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2024-8183 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

Origin Validation Error

Overview prefect is a Prefect is a new workflow management system, designed for modern infrastructure and powered by the open-source Prefect Core workflow engine. Users organize Tasks into Flows, and Prefect takes care of the rest. Affected versions of this package are vulnerable to Origin...

cvapipe-analysis (0.1.4) potentially affected by CVE-2024-8183 via prefect (0.14.15)

prefect PYPI version 0.14.15 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cvapipe-analysis 0.1.4 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

cupyopt (0.14.11.1), fantasy-analysis (>=0.0.0, <=0.0.3) potentially affected by CVE-2024-8183 via prefect (0.14.11)

prefect PYPI version 0.14.11 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cupyopt 0.14.11.1 - fantasy-analysis =0.0.0, =0.0.3 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

soam (>=0.3.5, <=0.10.1) potentially affected by CVE-2024-8183 via prefect (0.14.17)

prefect PYPI version 0.14.17 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - soam =0.3.5, =0.10.1 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

aporacle (>=0.0.126, <=0.0.143), assemblit (>=0.1.11, <=0.1.13) +16 more potentially affected by CVE-2024-8183 via prefect (>=2.0.0b8, <=2.19.4)

prefect PYPI version =2.0.0b8, =0.0.126, =0.1.11, =5.3.0, =2.37.0, =0.1.0, =0.0.1, =0.3.2, =0.0.217, =0.1.1, =0.0.5, =0.15.3, =0.6.5, =1.0.4, =0.1.0a0, =0.1.0a5 and more Source cves: CVE-2024-8183 Source advisory: SNYK:PYTHON-PREFECT-9487016...

cupyopt (>=0.15.11.1, <=0.15.11.2), exactonline-prefect-tasks (>=0.0.5, <=0.0.26) +6 more potentially affected by CVE-2024-8183 via prefect (0.15.11)

prefect PYPI version 0.15.11 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cupyopt =0.15.11.1, =0.0.5, =0.0.4, =0.0.4, =0.0.2, =0.0.14, =0.0.15 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

prefect-ds (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-8183 via prefect (0.9.2)

prefect PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - prefect-ds =0.1.0, =0.1.1 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

aporacle (>=0.0.126, <=0.0.143), assemblit (>=0.1.11, <=0.1.13) +16 more potentially affected by CVE-2024-8183 via prefect (>=2.0.0b8, <=2.19.4)

prefect PYPI version =2.0.0b8, =0.0.126, =0.1.11, =5.3.0, =2.37.0, =0.1.0, =0.0.1, =0.3.2, =0.0.217, =0.1.1, =0.0.5, =0.15.3, =0.6.5, =1.0.4, =0.1.0a0, =0.1.0a5 and more Source cves: CVE-2024-8183 Source advisory: GHSA-4V9F-R55G-G6HC...

kitanaqa (0.1.0) potentially affected by CVE-2024-8183 via prefect (0.13.4)

prefect PYPI version 0.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - kitanaqa 0.1.0 Source cves: CVE-2024-8183 Source advisory: OSV:GHSA-4V9F-R55G-G6HC...

abm-colony-collection (>=0.1.0, <=0.5.0), abm-initialization-collection (>=0.1.0, <=0.7.0) +98 more potentially affected by CVE-2024-8183 via prefect (>=0.9.2, <=3.0.0rc20)

prefect PYPI version =0.9.2, =0.1.0, =0.1.0, =0.1.0, =0.0.126, =0.1.0, =1.0.4, =3.4.0, =0.4.0b0, =0.1.11, =0.1.0, =1.0.17, =0.1.0, =2.6.0, =2.7.1 and more Source cves: CVE-2024-8183 Source advisory: MEND:CVE-2024-8183...

CVE-2024-8183

A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and...

Prefect 访问控制错误漏洞

Prefect is a workflow orchestration tool from Prefect Open Source that enables developers to build, observe and react to data pipelines. An access control error vulnerability exists in Prefect version 2.20.2 that stems from a CORS misconfiguration that allows unauthorized domains to access...