PyPI/prefect CVE-2024-8183: high 7.6, EPSS 0.18%
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
Action: Upgrade prefect to 2.20.17 or later.
pip install prefect==3.0.3pip install prefect==2.20.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0rc1 | 3.0.3 | - |
| 0 | 2.20.17 | - |
Fixed versions
| 3.0.3 | 2.20.17 |
Sources
- osv: GHSA-4v9f-r55g-g6hc
- https://nvd.nist.gov/vuln/detail/CVE-2024-8183
- https://github.com/PrefectHQ/prefect/issues/15074
- https://github.com/PrefectHQ/prefect/commit/8f159b404126d93964a4daace7619bc553fa318c
- https://github.com/prefecthq/prefect/commit/a69266e077169b8a32ad76b1dd3ea63b96d011c2
- https://github.com/PrefectHQ/prefect
- https://github.com/PrefectHQ/prefect/releases/tag/2.20.17
- https://huntr.com/bounties/b801de43-ff9f-4db9-b583-4797d4f7d3d2
CVE-2024-8183 · published · modified · JSON