PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
prefect Prefect has Git Flag Injection via commit_sha and directories Parameters Leading to Remote Code Execution (RCE) Critical 9.9 4 months ago 14 hours ago
prefect Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready' High Risk 7.5 5 months ago 1 month ago
prefect Prefect Unauthenticated Event Injection via /api/events/in WebSocket High Risk 7.3 6 months ago 1 month ago
prefect Prefect has an Argument Injection issue High Risk 8.5 5 months ago 1 month ago
prefect Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url Medium Risk 5.0 6 months ago 1 month ago
prefect Prefect Git Argument Injection in GitRepository Pull Steps Medium Risk 6.3 6 months ago 1 month ago
prefect Prefect Auth Bypass via endswith() Health Check Exemption Medium Risk 5.3 6 months ago 1 month ago
prefect Cross-Site Request Forgery vulnerability in Prefect High Risk 8.8 2 years ago 1 month ago
prefect No summary available High Risk 7.5 5 months ago 3 months ago
prefect Prefect has an Argument Injection issue High Risk 8.5 3 months ago 3 months ago
prefect Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url Medium Risk 5.0 3 months ago 3 months ago
prefect Prefect Git Argument Injection in GitRepository Pull Steps Medium Risk 6.3 3 months ago 3 months ago
prefect Prefect Auth Bypass via endswith() Health Check Exemption Medium Risk 5.3 3 months ago 3 months ago
prefect Prefect Unauthenticated Event Injection via /api/events/in WebSocket High Risk 7.3 3 months ago 3 months ago
prefect Prefect CORS (Cross-Origin Resource Sharing) misconfiguration High Risk 7.6 1 year ago 3 months ago
prefect Prefect CORS (Cross-Origin Resource Sharing) misconfiguration High Risk 7.6 3 months ago 3 months ago
prefect Cross-Site Request Forgery vulnerability in Prefect High Risk 8.8 3 months ago 3 months ago
Data courtesy of OSV.dev
Page 1