{"action":"Upgrade prefect to 2.20.17 or later.","affected":[{"fixed":"3.0.3","introduced":"3.0.0rc1"},{"fixed":"2.20.17","introduced":"0"}],"component":"prefect","cve_ids":["CVE-2024-8183"],"ecosystem":"PyPI","epss":0.00184,"exploited":false,"fixed_versions":["3.0.3","2.20.17"],"ghsa_id":"GHSA-4v9f-r55g-g6hc","id":"tcs_01M5KEZ2Q6PJV7MR7SP05B7XNS","modified_at":"2026-07-07T17:56:44.984520732Z","published_at":"2025-03-20T12:32:47Z","references":["https://osv.dev/vulnerability/GHSA-4v9f-r55g-g6hc","https://nvd.nist.gov/vuln/detail/CVE-2024-8183","https://github.com/PrefectHQ/prefect/issues/15074","https://github.com/PrefectHQ/prefect/commit/8f159b404126d93964a4daace7619bc553fa318c","https://github.com/prefecthq/prefect/commit/a69266e077169b8a32ad76b1dd3ea63b96d011c2","https://github.com/PrefectHQ/prefect","https://github.com/PrefectHQ/prefect/releases/tag/2.20.17","https://huntr.com/bounties/b801de43-ff9f-4db9-b583-4797d4f7d3d2"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-4v9f-r55g-g6hc","url":"https://osv.dev/vulnerability/GHSA-4v9f-r55g-g6hc"}],"summary":"Prefect CORS (Cross-Origin Resource Sharing) misconfiguration"}