PYSEC-2026-2436 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Summary The DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would...

PYSEC-2026-2434 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Summary The DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would...

CVE-2026-59215

creationtimestamp| type| source ---|---|--- 2026-07-13 14:45:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjwmojf6i2w 2026-07-16 08:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrfqpnso2p 2026-07-24 18:35:06+00:00| published-proof-of-concept|...

PYSEC-2026-3262 Segfault via invalid attributes in `pywrap_tfe_src.cc`

Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extractvolumepatches by passing in quantized tensors as input ksizes. python import numpy as np import...

CVE-2026-61971

creationtimestamp| type| source ---|---|--- 2026-07-13 13:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjszxizpy2q 2026-07-13 21:32:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqknduvgfx2d 2026-07-14 02:49:10+00:00| seen|...

CVE-2026-9824

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrszmrjk2s 2026-07-13 14:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjuaxgcny27 2026-07-13 18:19:38+00:00| seen|...

CVE-2026-4765

creationtimestamp| type| source ---|---|--- 2026-07-13 13:02:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjqucnozj2s 2026-07-13 14:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjv2ju4vn2t 2026-07-13 18:14:29+00:00| seen|...

GHSA-C7HR-448W-65PX

creationtimestamp| type| source ---|---|--- 2026-07-13 13:00:04+00:00| seen| https://t.me/poxek/6193 2026-07-14 00:00:48+00:00| published-proof-of-concept| https://t.me/poxek/6193...

CVE-2026-57805

creationtimestamp| type| source ---|---|--- 2026-07-13 12:34:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpbecik52e...

CVE-2026-57816

creationtimestamp| type| source ---|---|--- 2026-07-13 12:09:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnvukf5m2y 2026-07-13 21:31:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkncjxa5h2a 2026-07-14 02:26:29+00:00| seen|...

CVE-2026-61976

creationtimestamp| type| source ---|---|--- 2026-07-13 12:09:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnulvaea2f 2026-07-13 13:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjswlvtwy2k 2026-07-13 15:44:34+00:00| seen|...

CVE-2026-61977

creationtimestamp| type| source ---|---|--- 2026-07-13 12:03:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnl3rpau2y 2026-07-13 13:53:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtovidza27 2026-07-14 02:38:39+00:00| seen|...

CVE-2026-61955

creationtimestamp| type| source ---|---|--- 2026-07-13 11:59:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjndygvcm2y 2026-07-13 18:04:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkbqk2co427 2026-07-14 02:02:07+00:00| seen|...

CVE-2026-61956

creationtimestamp| type| source ---|---|--- 2026-07-13 11:56:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn5hwcrf2f 2026-07-13 19:45:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhf5qieu2c 2026-07-14 02:20:58+00:00| seen|...

CVE-2026-59521

creationtimestamp| type| source ---|---|--- 2026-07-13 11:55:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn4eonhm2z 2026-07-13 19:45:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhecakde22 2026-07-14 02:20:17+00:00| seen|...

CVE-2026-59516

creationtimestamp| type| source ---|---|--- 2026-07-13 11:54:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn2rtdon22 2026-07-13 19:04:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkf3xenwt2z 2026-07-14 02:05:01+00:00| seen|...

CVE-2026-53606

creationtimestamp| type| source ---|---|--- 2026-07-13 11:50:20+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mqjmswsvuj2c 2026-10-20 17:26:23+00:00| seen| https://infosec.exchange/users/cve/statuses/117474406092007404...

CVE-2026-61975

creationtimestamp| type| source ---|---|--- 2026-07-13 11:38:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjm5r5slr2x 2026-07-13 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtubhnlx2z 2026-07-14 03:05:32+00:00| seen|...

CVE-2026-61958

creationtimestamp| type| source ---|---|--- 2026-07-13 11:37:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjm4cslsu2y 2026-07-13 11:37:42+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqjm4elph22m 2026-07-14 02:25:56+00:00| seen|...

CVE-2026-57745

creationtimestamp| type| source ---|---|--- 2026-07-13 11:35:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjlxnt72w2c 2026-07-16 07:57:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr7kbu6v2q...