Advisories for Pypi/Prefect package

An attacker is able to steal secrets and potentially gain remote code execution via CSRF using the Prefect API.