prefab-ui vulnerabilities

1 known vulnerability in prefab-ui from PrefectHQ. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  prefab-ui: Improper Control of Generation of Code

  CVE-2026-120338Nov 1, 2026PrefectHQ

  Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the la