Advisoriesby Ibisdbt Labs security advisories
4 advisories across dbt Core
dbt has an implicit override for built-in materializations from installed packagesCVE-2024-40637fixed in 1.6.14 +1dbt allows Binding to an Unrestricted IP Address via socketsocketCVE-2024-36105fixed in 1.6.15 +2dbt uses a SQLparse version with a high vulnerabilityGHSA-p72q-h37j-3hq7fixed in 1.6.13 +1dbt-core's secret env vars written to package-lock.json in plaintextGHSA-j4g3-3q8x-jxqpfixed in 1.7.3About dbt Labs
dbt, the standard for transforming data in the warehouse: dbt Core, the dbt Fusion engine and the dbt platform.
Elsewhere on Ibis: Acquisitions · Paydays · Releases · Repos · TechConf