{"action":"Upgrade prefect to 2.20.17 or later.","affected":[{"fixed":"2.20.17","introduced":"0"},{"fixed":"3.0.3","introduced":"3.0.0rc1"}],"component":"prefect","cve_ids":["CVE-2024-8183"],"ecosystem":"PyPI","epss":0.00184,"exploited":false,"fixed_versions":["2.20.17","3.0.3"],"ghsa_id":"GHSA-4v9f-r55g-g6hc","id":"tcs_01M5KGVRD01K6R7D8298X4A8SP","modified_at":"2026-07-07T17:48:07.117706796Z","published_at":"2026-07-07T14:34:56.433987Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1800","https://nvd.nist.gov/vuln/detail/CVE-2024-8183","https://github.com/PrefectHQ/prefect/issues/15074","https://github.com/PrefectHQ/prefect/commit/8f159b404126d93964a4daace7619bc553fa318c","https://github.com/prefecthq/prefect/commit/a69266e077169b8a32ad76b1dd3ea63b96d011c2","https://github.com/PrefectHQ/prefect","https://github.com/PrefectHQ/prefect/releases/tag/2.20.17","https://huntr.com/bounties/b801de43-ff9f-4db9-b583-4797d4f7d3d2","https://pypi.org/project/prefect","https://github.com/advisories/GHSA-4v9f-r55g-g6hc"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"PYSEC-2026-1800","url":"https://osv.dev/vulnerability/PYSEC-2026-1800"}],"summary":"Prefect CORS (Cross-Origin Resource Sharing) misconfiguration"}