27 matches found
airflow-dremio-provider (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-69219 via apache-airflow-providers-http (4.10.0)
apache-airflow-providers-http PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-http and may be impacted: - airflow-dremio-provider =0.1.0, =0.1.1 Source cves: CVE-2025-69219 Source advisory: OSV:PYSEC-2026-23...
ddsapi (>=0.6.0b5, <=0.7.1), gandharva (>=0.0.1, <=0.0.3) +8 more potentially affected by CVE-2026-33310 via intake (>=2.0.0a2, <=2.0.8)
intake PYPI version =2.0.0a2, =0.6.0b5, =0.0.1, =0.2.7a2, =0.2.4a1, =0.6.2rc6, =0.0.1, =0.6.4, =0.18.0, =0.19.27 Source cves: CVE-2026-33310 Source advisory: SNYK:PYTHON-INTAKE-15763544...
airflow-dremio-provider (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-69219 via apache-airflow-providers-http (4.10.0)
apache-airflow-providers-http PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-http and may be impacted: - airflow-dremio-provider =0.1.0, =0.1.1 Source cves: CVE-2025-69219 Source advisory:...
EUVD-2024-21221
Malicious code in bioql PyPI...
EUVD-2025-12372
Malicious code in bioql PyPI...
CVE-2025-2298
An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. This vulnerability exists due to...
CVE-2025-2298
An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. This vulnerability exists due to...
CVE-2025-2298
CVE-2025-2298 is an improper authorization vulnerability in Dremio Software where authenticated users can delete arbitrary files across local and remote locations due to insufficient API endpoint access controls. Impact includes potential data loss and DoS, with possible escalation depending on d...
CVE-2025-2298 Authenticated API Endpoint Allows Arbitrary File Deletion in Dremio Software
An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. This vulnerability exists due to...
CVE-2025-2298 Authenticated API Endpoint Allows Arbitrary File Deletion in Dremio Software
An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. This vulnerability exists due to...
CVE-2025-2298: Missing Authorization
An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. This vulnerability exists due to...
Dremio security vulnerabilities
Dremio is a data-as-a-service platform from Dremio, Inc. that provides a fast, self-service approach to data analysis. A security vulnerability exists in Dremio that stems from insufficient API endpoint access control and could lead to the deletion of arbitrary files by authenticated users...
PT-2025-17445 · Dremio · Dremio
Name of the Vulnerable Software and Affected Versions: Dremio versions prior to 24.0.0 Dremio versions 24.3.0 through 24.3.16 Dremio versions 25.0.0 through 25.0.14 Dremio versions 25.1.0 through 25.1.7 Dremio versions 25.2.0 through 25.2.4 Description: An improper authorization issue in Dremio...
CVE-2024-23768
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders and the files and datasets in these folders can access these folders, files, and datasets. To be successful, the user must have access to the source and at least one folder in the source...
data-pipelines-cli (0.31.0), dbt-dremio (1.7.0) +12 more potentially affected by CVE-2024-40637 via dbt-core (>=1.7.0, <=1.7.13)
dbt-core PYPI version =1.7.0, =1.7.0, =0.0.2, =0.5.0, =1.7.0, =1.7.0, =0.0.4, =0.4.3, =0.1.0, =0.0.1rc8, =0.2.1, =0.1.0, =0.2.1 Source cves: CVE-2024-40637 Source advisory: OSV:PYSEC-2024-66...
BIT-DREMIO-2024-23768
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders and the files and datasets in these folders can access these folders, files, and datasets. To be successful, the user must have access to the source and at least one folder in the source...
data-pipelines-cli (0.31.0), dbt-dremio (1.7.0) +12 more potentially affected by CVE-2024-36105 via dbt-core (>=1.7.0, <=1.7.14)
dbt-core PYPI version =1.7.0, =1.7.0, =0.0.2, =0.5.0, =1.7.0, =1.7.0, =0.0.4, =0.4.3, =0.1.0, =0.0.1rc8, =0.2.1, =0.1.0, =0.2.1 Source cves: CVE-2024-36105 Source advisory: GHSA-PMRX-695R-4349...
CVE-2024-23768
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders and the files and datasets in these folders can access these folders, files, and datasets. To be successful, the user must have access to the source and at least one folder in the source...
CVE-2024-23768
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders and the files and datasets in these folders can access these folders, files, and datasets. To be successful, the user must have access to the source and at least one folder in the source...
Path traversal
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders and the files and datasets in these folders can access these folders, files, and datasets. To be successful, the user must have access to the source and at least one folder in the source...