Latest version: v1.8.8
| CVE/PVE | Vulnerability ID | Advisory | Affected versions | Severity | Severity Score |
|---|---|---|---|---|---|
| CVE-2024-36105 | 71635 |
In DBT affected versions, binding to INADDR_ANY (0.0.0.0) or IN6ADDR_… |
|
- | - |
| CVE-2024-40637 | 72255 |
When a user installs a package in dbt, they gain the capability to ov… |
|
HIGH | 7.8 |
| PVE-2024-73530 | 73530 |
Affected versions of the dbt package are potentially vulnerable to Im… |
|
- | - |
| PVE-2024-67887 | 68018 |
Dbt-core version 1.8.0b3 has upgraded sqlparse to versions between ">… |
|
- | - |
| PVE-2024-99810 | 65981 |
Affected versions of dbt-core are vulnerable to the clear text storag… |
|
- | - |
| CVE-2020-28493 | 42229 |
Dbt-core 0.20.0rc1 updates its dependency 'jinja2' to v2.11.3 to incl… |
|
MEDIUM | 5.3 |