PyPI/prowler CVE-2026-73262: medium 5.4, EPSS 0.30%

Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

Action: Upgrade prowler to 5.37.0 or later.

pip install prowler==5.37.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3907
• https://github.com/prowler-cloud/prowler/security/advisories/GHSA-c2jg-2778-ggm4
• https://nvd.nist.gov/vuln/detail/CVE-2026-73262
• https://github.com/prowler-cloud/prowler/pull/12221
• https://github.com/prowler-cloud/prowler/commit/6db407ed3c17d4c73a8f619fdb30580c8465027f
• https://github.com/prowler-cloud/prowler
• https://github.com/prowler-cloud/prowler/releases/tag/5.37.0
• https://pypi.org/project/prowler
• https://github.com/advisories/GHSA-c2jg-2778-ggm4

CVE-2026-73262 · published 2026-09-10T09:45:00.397732Z · modified 2026-09-10T12:25:53.102804611Z · JSON