cryptobot-python (0.1.5), ops-py-azure-key-vault-alert (>=7.0.0, <=7.0.1) +2 more potentially affected by CVE-2026-3219 via pip (24.1.0)

pip PYPI version 24.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cryptobot-python 0.1.5 - ops-py-azure-key-vault-alert =7.0.0, =1.3.1, =2.0.1 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

Making opportunistic cyberattacks harder by design

This is part of a series of blogs and interviews conducted with our Microsoft Deputy CISOs , in which we surface a number of mission-critical security recommendations and best practices that businesses can enact right now and derive real meaningful benefits from. In this article, Ilya Grebnov,...

Making opportunistic cyberattacks harder by design

This is part of a series of blogs and interviews conducted with our Microsoft Deputy CISOs , in which we surface a number of mission-critical security recommendations and best practices that businesses can enact right now and derive real meaningful benefits from. In this article, Ilya Grebnov,...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-33948)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33948 advisory. - jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-32316)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-32316 advisory. - jq is a command-line JSON processor. An integer overflow vulnerability exists through version...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-40164)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-40164 advisory. - jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, j...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-39956)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-39956 advisory. - jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-39979)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-39979 advisory. - jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5...

BIT-AIRFLOW-2026-25219 Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

dagit (0.14.17rc6), dagster-airbyte (0.14.17rc6) +35 more potentially affected by CVE-2026-41490 via dagster (0.14.17rc6)

dagster PYPI version 0.14.17rc6 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.17rc6 - dagster-airbyte 0.14.17rc6 - dagster-airflow 0.14.17rc6 - dagster-aws 0.14.17rc6 - dagster-azure 0.14.17rc6 - dagster-cele...

dagit (0.13.6), dagster-airflow (0.13.6) +31 more potentially affected by CVE-2026-41490 via dagster (0.13.6)

dagster PYPI version 0.13.6 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.6 - dagster-airflow 0.13.6 - dagster-aws 0.13.6 - dagster-azure 0.13.6 - dagster-celery 0.13.6 - dagster-celery-docker 0.13.6 -...

dagit (0.12.11rc0), dagster-airflow (0.12.11rc0) +28 more potentially affected by CVE-2026-41490 via dagster (0.12.11rc0)

dagster PYPI version 0.12.11rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.11rc0 - dagster-airflow 0.12.11rc0 - dagster-aws 0.12.11rc0 - dagster-azure 0.12.11rc0 - dagster-cloud 0.12.11rc0 - dagster-dask...

dagit (0.13.10rc3), dagster-airflow (0.13.10rc3) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.10rc3)

dagster PYPI version 0.13.10rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.10rc3 - dagster-airflow 0.13.10rc3 - dagster-aws 0.13.10rc3 - dagster-azure 0.13.10rc3 - dagster-celery 0.13.10rc3 -...

dagit (0.13.8rc0), dagster-airflow (0.13.8rc0) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.8rc0)

dagster PYPI version 0.13.8rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.8rc0 - dagster-airflow 0.13.8rc0 - dagster-aws 0.13.8rc0 - dagster-azure 0.13.8rc0 - dagster-celery 0.13.8rc0 - dagster-celery-dock...

dagit (0.11.15), dagster-airflow (0.11.15) +29 more potentially affected by CVE-2026-41490 via dagster (0.11.15)

dagster PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.15 - dagster-airflow 0.11.15 - dagster-aws 0.11.15 - dagster-azure 0.11.15 - dagster-cloud 0.11.15 - dagster-cron 0.11.15 -...

dagit (0.12.0rc0), dagster-airflow (0.12.0rc0) +28 more potentially affected by CVE-2026-41490 via dagster (0.12.0rc0)

dagster PYPI version 0.12.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.0rc0 - dagster-airflow 0.12.0rc0 - dagster-aws 0.12.0rc0 - dagster-azure 0.12.0rc0 - dagster-cloud 0.12.0rc0 - dagster-dask 0.12.0r...

dagit (0.13.12rc2), dagster-airflow (0.13.12rc2) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.12rc2)

dagster PYPI version 0.13.12rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.12rc2 - dagster-airflow 0.13.12rc2 - dagster-aws 0.13.12rc2 - dagster-azure 0.13.12rc2 - dagster-celery 0.13.12rc2 -...

dagit (0.13.4rc0), dagster-airflow (0.13.4rc0) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.4rc0)

dagster PYPI version 0.13.4rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.4rc0 - dagster-airflow 0.13.4rc0 - dagster-aws 0.13.4rc0 - dagster-azure 0.13.4rc0 - dagster-celery 0.13.4rc0 - dagster-celery-dock...

dagit (0.13.13rc0), dagster-airflow (0.13.13rc0) +30 more potentially affected by CVE-2026-41490 via dagster (0.13.13rc0)

dagster PYPI version 0.13.13rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.13rc0 - dagster-airflow 0.13.13rc0 - dagster-aws 0.13.13rc0 - dagster-azure 0.13.13rc0 - dagster-celery 0.13.13rc0 -...

dagit (0.12.3rc1), dagster-airflow (0.12.3rc1) +28 more potentially affected by CVE-2026-41490 via dagster (0.12.3rc1)

dagster PYPI version 0.12.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.3rc1 - dagster-airflow 0.12.3rc1 - dagster-aws 0.12.3rc1 - dagster-azure 0.12.3rc1 - dagster-cloud 0.12.3rc1 - dagster-dask 0.12.3r...