dbt-labs/dbt-core Security Advisories | GitStock

low2024-07-17

dbt has an implicit override for built-in materializations from installed packages

GHSA-p3f3-5ccg-83xq · CVE-2024-40637

medium2024-05-28

dbt allows Binding to an Unrestricted IP Address via socketsocket

GHSA-pmrx-695r-4349 · CVE-2024-36105

high2024-04-22

dbt uses a SQLparse version with a high vulnerability

GHSA-p72q-h37j-3hq7

low2023-12-08

dbt-core's secret env vars written to package-lock.json in plaintext

GHSA-j4g3-3q8x-jxqp