prowler-cloud
PyPI3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting prowler-cloudpage 1 of 1
- CVE-2026-100169HIGHCVSS 7.6EG 7.6fixed in 5.30.32026-10-14
vulnerable: 0.0.0rc1 ... 5.9.2 (191 versions)
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, bec…
- CVE-2026-59151CRITICALCVSS 9.6EG 9.6fixed in 5.30.32026-07-10
vulnerable: 0.0.0rc1 ... 5.9.2 (191 versions)
Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token, and the ACS finish logic in api/src/ba…
- CVE-2026-73262MEDIUMCVSS 5.4EG 5.4fixed in 5.37.02026-08-12
vulnerable: 0.0.0rc1 ... 5.9.2 (202 versions)
Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_dict and parse_html_string, into generated reports without HTML …
Check whether prowler-cloud is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for prowler-cloud CVEs against the assets you own.
Book a Demo →