dagit (0.13.15), dagster-airbyte (0.13.15) +31 more potentially affected by CVE-2025-51481 via dagster (0.13.15)

dagster PYPI version 0.13.15 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.15 - dagster-airbyte 0.13.15 - dagster-airflow 0.13.15 - dagster-aws 0.13.15 - dagster-azure 0.13.15 - dagster-celery 0.13.15 -...

dagit (0.12.9), dagster-airflow (0.12.9) +28 more potentially affected by CVE-2025-51481 via dagster (0.12.9)

dagster PYPI version 0.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.9 - dagster-airflow 0.12.9 - dagster-aws 0.12.9 - dagster-azure 0.12.9 - dagster-cloud 0.12.9 - dagster-dask 0.12.9 - dagster-databric...

dagit (0.13.2), dagster-airflow (0.13.2) +30 more potentially affected by CVE-2025-51481 via dagster (0.13.2)

dagster PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.2 - dagster-airflow 0.13.2 - dagster-aws 0.13.2 - dagster-azure 0.13.2 - dagster-celery 0.13.2 - dagster-celery-docker 0.13.2 -...

dagit (0.14.4rc0), dagster-airbyte (0.14.4rc0) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.4rc0)

dagster PYPI version 0.14.4rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.4rc0 - dagster-airbyte 0.14.4rc0 - dagster-airflow 0.14.4rc0 - dagster-aws 0.14.4rc0 - dagster-azure 0.14.4rc0 - dagster-celery...

dagit (0.14.7), dagster-airbyte (0.14.7) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.7)

dagster PYPI version 0.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.7 - dagster-airbyte 0.14.7 - dagster-airflow 0.14.7 - dagster-aws 0.14.7 - dagster-azure 0.14.7 - dagster-celery 0.14.7 -...

dagit (0.15.3), dagster-airbyte (0.15.3) +35 more potentially affected by CVE-2025-51481 via dagster (0.15.3)

dagster PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.15.3 - dagster-airbyte 0.15.3 - dagster-airflow 0.15.3 - dagster-aws 0.15.3 - dagster-azure 0.15.3 - dagster-celery 0.15.3 -...

dagit (0.12.11rc0), dagster-airflow (0.12.11rc0) +28 more potentially affected by CVE-2025-51481 via dagster (0.12.11rc0)

dagster PYPI version 0.12.11rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.11rc0 - dagster-airflow 0.12.11rc0 - dagster-aws 0.12.11rc0 - dagster-azure 0.12.11rc0 - dagster-cloud 0.12.11rc0 - dagster-dask...

dagit (0.14.5), dagster-airbyte (0.14.5) +34 more potentially affected by CVE-2025-51481 via dagster (0.14.5)

dagster PYPI version 0.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.5 - dagster-airbyte 0.14.5 - dagster-airflow 0.14.5 - dagster-aws 0.14.5 - dagster-azure 0.14.5 - dagster-celery 0.14.5 -...

dagit (0.12.4), dagster-airflow (0.12.4) +28 more potentially affected by CVE-2025-51481 via dagster (0.12.4)

dagster PYPI version 0.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.4 - dagster-airflow 0.12.4 - dagster-aws 0.12.4 - dagster-azure 0.12.4 - dagster-cloud 0.12.4 - dagster-dask 0.12.4 - dagster-databric...

dagit (0.13.10rc3), dagster-airflow (0.13.10rc3) +30 more potentially affected by CVE-2025-51481 via dagster (0.13.10rc3)

dagster PYPI version 0.13.10rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.10rc3 - dagster-airflow 0.13.10rc3 - dagster-aws 0.13.10rc3 - dagster-azure 0.13.10rc3 - dagster-celery 0.13.10rc3 -...

dagit (0.14.5rc0), dagster-airbyte (0.14.5rc0) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.5rc0)

dagster PYPI version 0.14.5rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.5rc0 - dagster-airbyte 0.14.5rc0 - dagster-airflow 0.14.5rc0 - dagster-aws 0.14.5rc0 - dagster-azure 0.14.5rc0 - dagster-celery...

Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

SummaryAmazon Redshift Python Connector is a pure Python connector to Redshift i.e., driver that implements the Python Database API Specification 2.0.When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate...

PYSEC-2026-1867 Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

Summary Amazon Redshift Python Connector is a pure Python connector to Redshift i.e., driver that implements the Python Database API Specification 2.0. When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certifica...

PYSEC-2026-1804 Azure PromptFlow remote code execution related to Jinja templates

Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...

Azure PromptFlow remote code execution related to Jinja templates

Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...

c7n-azure (0.7.22), c7n-kube (0.2.22) +1 more potentially affected by CVE-2024-6345 via setuptools (67.3.2)

setuptools PYPI version 67.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure 0.7.22 - c7n-kube 0.2.22 - c7n-sphinxext 1.1.22 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

adaptgym (>=0.1.1, <=0.1.2), aiearth-engine (>=3.1.0, <=3.1.5) +34 more potentially affected by CVE-2024-6345 via setuptools (66.0.0)

setuptools PYPI version 66.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - adaptgym =0.1.1, =3.1.0, =0.2.2, =0.1.1, =0.2.2 - bob-bio-base 8.0.0 - bob-bio-face 8.0.0 - bob-bio-spear 5.0.0 - bob-bio-vein 5.0.0 -...

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (>=1.0.0, <=1.0.3) +183 more potentially affected by CVE-2024-35255 via azure-identity (>=1.0.1, <=1.16.0)

azure-identity PYPI version =1.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =0.1.12, =0.0.2, =0.0.53, =1.1.89, =1.0.0, =0.1.10, =1.1.24 - azdiff 0.1.0 and more Source cves: CVE-2024-35255 Source advisory: OSV:PYSEC-2026-1209...

PYSEC-2026-1209 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...