CVE-2020-1747

Advisory

Dbt-trino 1.2.1 requires 'pyyaml>=6.0' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Features
- Support `delete+insert` materialization ([103](https://github.com/starburstdata/dbt-trino/issues/103), [#62](https://github.com/starburstdata/dbt-trino/pull/62))
- Add support for persist_docs ([76](https://github.com/starburstdata/dbt-trino/issues/76), [#77](https://github.com/starburstdata/dbt-trino/pull/77))
- Add `merge` materialization ([105](https://github.com/starburstdata/dbt-trino/issues/105), [#104](https://github.com/starburstdata/dbt-trino/pull/104))
Under the Hood
- Improve developer experience (changie, pre-commit, black, isort) ([97](https://github.com/starburstdata/dbt-trino/issues/97), [#98](https://github.com/starburstdata/dbt-trino/pull/98))
- Implement Veracode SCA security scan ([100](https://github.com/starburstdata/dbt-trino/issues/100), [#90](https://github.com/starburstdata/dbt-trino/pull/90))
- Implement Dependabot for automated dependency updates ([99](https://github.com/starburstdata/dbt-trino/issues/99), [#89](https://github.com/starburstdata/dbt-trino/pull/89))
Security
- Require pyyaml 6.0 ([96](https://github.com/starburstdata/dbt-trino/issues/96), [#106](https://github.com/starburstdata/dbt-trino/pull/106))

Contributors
- [hovaesco](https://github.com/hovaesco) ([#77](https://github.com/starburstdata/dbt-trino/pull/77), [#104](https://github.com/starburstdata/dbt-trino/pull/104))
- [mdesmet](https://github.com/mdesmet) ([#62](https://github.com/starburstdata/dbt-trino/pull/62), [#98](https://github.com/starburstdata/dbt-trino/pull/98), [#90](https://github.com/starburstdata/dbt-trino/pull/90), [#89](https://github.com/starburstdata/dbt-trino/pull/89), [#106](https://github.com/starburstdata/dbt-trino/pull/106))

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1747