Vulnerability	Vulnerable Version
H Origin Validation Error prefect is a Prefect is a new workflow management system, designed for modern infrastructure and powered by the open-source Prefect Core workflow engine. Users organize Tasks into Flows, and Prefect takes care of the rest. Affected versions of this package are vulnerable to Origin Validation Error due to a misconfiguration in the handling of CORS policies. An attacker can access sensitive data and potentially disrupt services by sending requests from unauthorized domains. How to fix Origin Validation Error? Upgrade `prefect` to version 2.20.17, 3.0.3 or higher.	[,2.20.17)[3.0.0,3.0.3)
H Server-side Request Forgery (SSRF) prefect is a Prefect is a new workflow management system, designed for modern infrastructure and powered by the open-source Prefect Core workflow engine. Users organize Tasks into Flows, and Prefect takes care of the rest. Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) when Prefect API is exposed to "external" users of any kind. An attacker can maliciously craft a notification URL that points to an internal API, resulting in potential information exposure, access to internal services, and private IP addresses. How to fix Server-side Request Forgery (SSRF)? Upgrade `prefect` to version 2.20.11, 3.0.2 or higher.	[,2.20.11)[3.0.0rc1,3.0.2)

Origin Validation Error

prefect is a Prefect is a new workflow management system, designed for modern infrastructure and powered by the open-source Prefect Core workflow engine. Users organize Tasks into Flows, and Prefect takes care of the rest.

Affected versions of this package are vulnerable to Origin Validation Error due to a misconfiguration in the handling of CORS policies. An attacker can access sensitive data and potentially disrupt services by sending requests from unauthorized domains.

How to fix Origin Validation Error?

Upgrade prefect to version 2.20.17, 3.0.3 or higher.

[,2.20.17)[3.0.0,3.0.3)

Server-side Request Forgery (SSRF)

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) when Prefect API is exposed to "external" users of any kind. An attacker can maliciously craft a notification URL that points to an internal API, resulting in potential information exposure, access to internal services, and private IP addresses.

How to fix Server-side Request Forgery (SSRF)?

Upgrade prefect to version 2.20.11, 3.0.2 or higher.

[,2.20.11)[3.0.0rc1,3.0.2)

Go back to all versions of this package