Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

prowler-cloud

3 known vulnerabilities (1 critical, 1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
5.48.0 (Nov 6, 2026): no advisory affects it
Newest unaffected release
5.48.0 (Nov 6, 2026), the latest release
Advisories
3 · 1 critical, 1 high, 1 medium
Weekly downloads
1,415
Dependents
0
Releases
215 since 3.0.0 (Dec 21, 2022)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 3

  • Account pre-hijacking in the Prowler API through email based social account linking without verification

    Affected: fixed in 5.30.3.

    Fixed in 5.30.3 (released Jun 19, 2026, 117 days before disclosure).

    The latest release, 5.48.0, is not affected.

  • CVE-2026-73262Medium 5.4

    Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

    Affected: fixed in 5.37.0.

    Fixed in 5.37.0 (released Aug 3, 2026, 9 days before disclosure).

    The latest release, 5.48.0, is not affected.

  • CVE-2026-59151Critical 9.6

    Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

    Affected: fixed in 5.30.3.

    Fixed in 5.30.3 (released Jun 19, 2026, 21 days before disclosure).

    The latest release, 5.48.0, is not affected.