Workflow

Dbt-core

Latest version: v1.8.8

The latest version of dbt-core with no known security vulnerabilities is 1.9.0b4. We recommend installing version 1.9.0b4.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v1.8.8 at Nov. 6, 2024
License
Apache-2.0 (Apache License 2.0)

Description

With dbt, data analysts and engineers can build analytics the way engineers build applications.

Resources

Vulnerabilities (6)

See all vulnerabilities
CVE-2024-36105
Affected versions:

<1.6.1 | >=1.7.0,<1.7.15 | >=1.8.0,<1.8.1

In DBT affected versions, binding to INADDR_ANY (0.0.0.0) or I…
CVE-2024-40637
Affected versions:

<1.6.14 | >=1.7.0b1,<1.7.14

When a user installs a package in dbt, they gain the capabilit…
PVE-2024-73530
Affected versions:

<1.9.0b1

Affected versions of the dbt package are potentially vulnerabl…
PVE-2024-67887
Affected versions:

<1.8.0b3

Dbt-core version 1.8.0b3 has upgraded sqlparse to versions bet…
PVE-2024-99810
Affected versions:

>=1.7.0,<1.7.3

Affected versions of dbt-core are vulnerable to the clear text…
CVE-2020-28493
Affected versions:

<0.20.0rc1

Dbt-core 0.20.0rc1 updates its dependency 'jinja2' to v2.11.3 …

Versions (265)

See all versions

Has known vulnerabilities

  • 1.9.0b4
  • 1.9.0b3
  • 1.9.0b2
  • 1.9.0b1
  • 1.8.8
  • 1.8.7
  • 1.8.6
  • 1.8.5
  • 1.8.4
  • 1.8.3
  • 1.8.2
  • 1.8.1
  • 1.8.0
  • 1.8.0rc2
  • 1.8.0rc1
  • 1.8.0b3
  • 1.8.0b2
  • 1.8.0b1
  • 1.7.18
  • 1.7.17