CVE-2026-7725
2 advisories.
PyPI/prefect CVE-2026-7725: medium 6.3, EPSS 0.42%
Prefect Git Argument Injection in GitRepository Pull Steps
Action: Upgrade prefect to 3.6.25.dev7 or later.
pip install prefect==3.6.25.dev7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.25.dev7 | - |
Fixed versions
| 3.6.25.dev7 |
Sources
- osv: GHSA-6rcx-55r6-jx65
- https://nvd.nist.gov/vuln/detail/CVE-2026-7725
- https://github.com/PrefectHQ/prefect/pull/21384
- https://github.com/PrefectHQ/prefect/commit/6a9d9918716ce4ee0297b69f3046f7067ef1faae
- https://gist.github.com/nedlir/c37d90dda5f715790eafc970b2ef0c8a
- https://github.com/PrefectHQ/prefect
- https://github.com/PrefectHQ/prefect/releases/tag/3.6.25.dev7
- https://vuldb.com/submit/807356
- https://vuldb.com/vuln/360901
- https://vuldb.com/vuln/360901/cti
CVE-2026-7725 · published · modified · JSON
PyPI/prefect CVE-2026-7725: medium 6.3, EPSS 0.42%
Prefect Git Argument Injection in GitRepository Pull Steps
Action: Upgrade prefect to 3.6.25.dev7 or later.
pip install prefect==3.6.25.dev7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.25.dev7 | - |
Fixed versions
| 3.6.25.dev7 |
Sources
- osv: PYSEC-2026-2955
- https://nvd.nist.gov/vuln/detail/CVE-2026-7725
- https://github.com/PrefectHQ/prefect/pull/21384
- https://github.com/PrefectHQ/prefect/commit/6a9d9918716ce4ee0297b69f3046f7067ef1faae
- https://gist.github.com/nedlir/c37d90dda5f715790eafc970b2ef0c8a
- https://github.com/PrefectHQ/prefect
- https://github.com/PrefectHQ/prefect/releases/tag/3.6.25.dev7
- https://vuldb.com/submit/807356
- https://vuldb.com/vuln/360901
- https://vuldb.com/vuln/360901/cti
- https://pypi.org/project/prefect
- https://github.com/advisories/GHSA-6rcx-55r6-jx65
CVE-2026-7725 · published · modified · JSON