Log in Start free

PrefectHQ

Products

ProductCVEsExploitedLatest
Prefect5–Aug 11, 2026
prefecthq/prefect5–Jun 20, 2026
fastmcp1–Apr 2, 2026
prefab-ui1–Nov 1, 2026

Exploited and recent CVEs

  • CVE-2026-120338 Critical 10.0 Prefab UI Pyodide sandbox escape to host RCE 0.8%
  • CVE-2026-72538 High 8.8 PrefectHQ Prefect - Argument Injection 1.0%
  • CVE-2026-5366 Critical 9.9 Git Argument Injection in prefecthq/prefect 1.0%
  • CVE-2026-3514 High 7.5 Authentication Bypass in prefecthq/prefect 0.5%
  • CVE-2026-3515 High 8.5 Argument Injection in prefecthq/prefect 0.3%
  • CVE-2026-7725 Medium 6.3 PrefectHQ prefect GitRepository Pull storage.py argument injection 0.2%
  • CVE-2026-7724 Medium 5.0 PrefectHQ prefect Webhook/Notification validate_restricted_url toctou 0.2%
  • CVE-2026-7723 High 7.3 PrefectHQ prefect WebSocket Endpoint in missing authentication 0.4%
  • CVE-2026-7722 Medium 5.3 PrefectHQ prefect Health Check API health endswith improper authentication 0.5%
  • CVE-2026-32871 High 8.5 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability 0.9%
  • CVE-2024-8183 High 7.6 CORS Misconfiguration in prefecthq/prefect 0.2%
  • CVE-2023-6022 High 8.8 Cross-Site Request Forgery (CSRF) in prefecthq/prefect 0.4%