AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

dbt Core security advisories

4 advisories · none critical or high in 12 months · latest Jul 17, 2024

Repository

4 advisories

Low 4.2Jul 17, 2024dbt has an implicit override for built-in materializations from installed packagesCVE-2024-40637fixed in 1.6.14 +1Medium 5.3May 28, 2024dbt allows Binding to an Unrestricted IP Address via socketsocketCVE-2024-36105fixed in 1.6.15 +2High 7.5Apr 22, 2024dbt uses a SQLparse version with a high vulnerabilityGHSA-p72q-h37j-3hq7fixed in 1.6.13 +1Low 3.2Dec 8, 2023dbt-core's secret env vars written to package-lock.json in plaintextGHSA-j4g3-3q8x-jxqpfixed in 1.7.3
About dbt Core

SQL transformation in the warehouse.

Packages watched: dbt-core (PyPI).

dbt-labs/dbt-coreOn Reposdbt Labs

dbt Labs elsewhere on Ibis: Acquisitions · Paydays · Releases · Repos · TechConf