# prefect (PyPI) vulnerabilities

9 known vulnerabilities (1 critical, 4 high, 3 medium, 1 low), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: 3.9.2 (Nov 6, 2026): no advisory affects it
- Newest unaffected release: 3.9.2 (Nov 6, 2026), the latest release
- Weekly downloads: 1.9M
- Releases: 500+ since 2.20.17 (Mar 21, 2025)
- Registry: https://pypi.org/project/prefect/
- Releases read: Nov 8, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-5366: 3.1.13 to 3.6.25.dev7 (3.6.25 is outside it)
- CVE-2026-3514: 2.20.17 to 3.6.22.dev8 (3.6.22 is outside it)
- CVE-2026-3515: 2.20.17 to 3.6.18 (3.6.19.dev1 is outside it)
- CVE-2026-7725: 2.20.17 to 3.6.25.dev6 (3.6.25.dev7 is outside it)
- CVE-2026-7724: 2.20.17 to 3.6.28.dev1 (3.6.28.dev2 is outside it)
- CVE-2026-7723: 2.20.17 to 3.6.14.dev7 (3.6.14 is outside it)
- CVE-2026-7722: 2.20.17 to 3.6.22.dev8 (3.6.22 is outside it)
- CVE-2024-8183: no published release is affected
- CVE-2023-6022: no published release is affected

Older releases aren't stored, so the earliest spans may start sooner.

## Advisories (9)

### [CVE-2026-5366](https://cve.now/CVE-2026-5366): Git Argument Injection in prefecthq/prefect

- Severity: Critical 9.9
- Published: Jun 20, 2026
- Affected: from 3.1.11, fixed in 3.6.25.
- Fixed in 3.6.25 (released Apr 3, 2026, 78 days before disclosure).
- The latest release, 3.9.2, is not affected.

### [CVE-2026-3514](https://cve.now/CVE-2026-3514): Authentication Bypass in prefecthq/prefect

- Severity: High 7.5
- Published: Jun 2, 2026
- Affected: fixed in 3.6.22; fixed in 3.6.22.dev7.
- Fixed in 3.6.22 (released Mar 12, 2026, 82 days before disclosure).
- The latest release, 3.9.2, is not affected.

### [CVE-2026-3515](https://cve.now/CVE-2026-3515): Argument Injection in prefecthq/prefect

- Severity: High 8.5
- Published: May 24, 2026
- Affected: through 3.6.18; through 3.6.18.
- Fixed in 3.6.19 (released Feb 24, 2026, 89 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.9.2, is not affected.

### [CVE-2026-7725](https://cve.now/CVE-2026-7725): PrefectHQ prefect GitRepository Pull storage.py argument injection

- Severity: Medium 5.3
- Published: May 4, 2026
- Affected: fixed in 3.6.25.dev7; fixed in 3.6.25.dev7.
- Fixed in 3.6.25.dev7 (released Apr 3, 2026, 31 days before disclosure).
- The latest release, 3.9.2, is not affected.

### [CVE-2026-7724](https://cve.now/CVE-2026-7724): PrefectHQ prefect Webhook/Notification validate\_restricted\_url toctou

- Severity: Low 2.3
- Published: May 4, 2026
- Affected: fixed in 3.6.28.dev2; fixed in 3.6.28.dev2.
- Fixed in 3.6.28.dev2 (released Apr 21, 2026, 13 days before disclosure).
- The latest release, 3.9.2, is not affected.

### [CVE-2026-7723](https://cve.now/CVE-2026-7723): PrefectHQ prefect WebSocket Endpoint in missing authentication

- Severity: Medium 6.9
- Published: May 4, 2026
- Affected: fixed in 3.6.14; fixed in 3.6.14.
- Fixed in 3.6.14 (released Jan 29, 2026, 95 days before disclosure).
- The latest release, 3.9.2, is not affected.

### [CVE-2026-7722](https://cve.now/CVE-2026-7722): PrefectHQ prefect Health Check API health endswith improper authentication

- Severity: Medium 6.9
- Published: May 4, 2026
- Affected: fixed in 3.6.22; fixed in 3.6.22.
- Fixed in 3.6.22 (released Mar 12, 2026, 53 days before disclosure).
- The latest release, 3.9.2, is not affected.

### [CVE-2024-8183](https://cve.now/CVE-2024-8183): CORS Misconfiguration in prefecthq/prefect

- Severity: High 7.6
- Published: Mar 20, 2025
- Affected: from 3.0.0rc1, fixed in 3.0.3; fixed in 2.20.17; fixed in 2.20.17; from 3.0.0rc1, fixed in 3.0.3.
- Fixed in 2.20.17 (released Mar 21, 2025, 1 day after disclosure) and 3.1.13 (released Jan 17, 2025, 62 days before disclosure, the advisory names 3.0.3, which was never published).
- The latest release, 3.9.2, is not affected.

### [CVE-2023-6022](https://cve.now/CVE-2023-6022): Cross-Site Request Forgery (CSRF) in prefecthq/prefect

- Severity: High 8.8
- Published: Nov 16, 2023
- Affected: from 2.0.0, fixed in 2.16.5.
- Fixed in 2.16.5.
- The latest release, 3.9.2, is not affected.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/prefect
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.