PyPI/prefect CVE-2023-6022: high 8.8, EPSS 0.39%

Cross-Site Request Forgery vulnerability in Prefect

Action: Upgrade prefect to 2.16.5 or later.

pip install prefect==2.16.5

Affected

Fixed versions

Sources

• osv: GHSA-4hh5-2678-83fx
• https://nvd.nist.gov/vuln/detail/CVE-2023-6022
• https://github.com/prefecthq/prefect/commit/227dfcc7e3374c212a4bcd68b14e090b1c02d9d3
• https://github.com/PrefectHQ/prefect/blob/main/RELEASE-NOTES.md#release-2165
• https://github.com/prefecthq/prefect
• https://huntr.com/bounties/dab47d99-551c-4355-9ab1-c99cb90235af

CVE-2023-6022 · published 2023-11-16T18:30:31Z · modified 2026-09-10T03:50:03.999929474Z · JSON