@oneuptime/cli (>=10.0.5, <=10.0.18) potentially affected by CVE-2026-30920 via @oneuptime/common (>=10.0.5, <=10.0.18)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.18 Source cves: CVE-2026-30920 Source advisory: GHSA-656W-6F6C-M9R6...

CVE-2002-0059

creationtimestamp| type| source ---|---|--- 2026-03-09 17:15:08+00:00| seen| https://gist.github.com/verdurin/ec4ecbbbe37c7ae1f4a79c34dbdb6793...

airflow-parse-bench (>=0.0.1, <=1.0.1), apache-airflow-providers-common-compat (>=1.0.0, <=1.5.1) potentially affected by CVE-2025-69219 via apache-airflow-providers-http (5.4.0)

apache-airflow-providers-http PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-http and may be impacted: - airflow-parse-bench =0.0.1, =1.0.0, =1.5.1 Source cves: CVE-2025-69219 Source advisory:...

CVE-2025-70047

An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2...

PT-2026-24069

An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2...

CVE-2026-29790

dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that...

Exposed Dangerous Method or Function

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/cli (>=10.0.5, <=10.0.19) potentially affected by CVE-2026-30921 via @oneuptime/common (>=10.0.5, <=10.0.19)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.19 Source cves: CVE-2026-30921 Source advisory: OSV:GHSA-4J36-39GM-8VQ8...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30921 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30921 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15444918...

@oneuptime/cli (>=10.0.5, <=10.0.19) potentially affected by CVE-2026-30921 via @oneuptime/common (>=10.0.5, <=10.0.19)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.19 Source cves: CVE-2026-30921 Source advisory: GHSA-4J36-39GM-8VQ8...

Arbitrary Code Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/cli (>=10.0.5, <=10.0.17) potentially affected by CVE-2026-30887 via @oneuptime/common (>=10.0.5, <=10.0.17)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.17 Source cves: CVE-2026-30887 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15440733...

@oneuptime/cli (>=10.0.5, <=10.0.17) potentially affected by CVE-2026-30887 via @oneuptime/common (>=10.0.5, <=10.0.17)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.17 Source cves: CVE-2026-30887 Source advisory: OSV:GHSA-H343-GG57-2Q67...

@oneuptime/cli (>=10.0.5, <=10.0.17) potentially affected by CVE-2026-30887 via @oneuptime/common (>=10.0.5, <=10.0.17)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.17 Source cves: CVE-2026-30887 Source advisory: GHSA-H343-GG57-2Q67...

Directory Traversal

Overview dbt-common is a The shared common utilities that dbt-core and adapter implementations use Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write files outside the intended extraction directory by supplying a malicious...

acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9), balto-core (>=0.1.5, <=0.1.7) +47 more potentially affected by CVE-2026-29790 via dbt-common (>=1.0.0b2, <=1.33.0)

dbt-common PYPI version =1.0.0b2, =0.1.7, =0.1.5, =0.21.7, =0.0.1rc1, =0.1.0a1, =1.0.9, =1.8.0, =1.8.0b2, =1.8.0, =1.8.0rc1, =2.0.0rc1 - dbt-docs-mcp 0.0.1 and more Source cves: CVE-2026-29790 Source advisory: SNYK:PYTHON-DBTCOMMON-15440507...

dbt-databricks (>=1.11.1, <=1.11.3) potentially affected by CVE-2026-29790 via dbt-common (1.36.0)

dbt-common PYPI version 1.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-common and may be impacted: - dbt-databricks =1.11.1, =1.11.3 Source cves: CVE-2026-29790 Source advisory: SNYK:PYTHON-DBTCOMMON-15440507...

CVE-2026-29790

dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that...

CVE-2026-29790

dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that...

CVE-2026-29790 dbt-common: commonprefix() doesn't protect against path traversal

dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that...