SQL Injection in Harbor scan log API

Impact A user with an administrator, projectadmin, or projectmaintainer role could utilize and exploit SQL Injection to allow the execution of any Postgres function or the extraction of sensitive information from the database through this API: GET...

GHSA-VW63-824V-QF2J SQL Injection in Harbor scan log API

Impact A user with an administrator, projectadmin, or projectmaintainer role could utilize and exploit SQL Injection to allow the execution of any Postgres function or the extraction of sensitive information from the database through this API: GET...

dbt (0.16.0rc1), dbt-bigquery (0.16.0rc1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.16.0rc1)

dbt-core PYPI version 0.16.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0rc1 - dbt-bigquery 0.16.0rc1 - dbt-postgres 0.16.0rc1 - dbt-redshift 0.16.0rc1 - dbt-snowflake 0.16.0rc1 Source cves: CVE-2024-361...

dbt (0.18.0b2), dbt-bigquery (0.18.0b2) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.18.0b2)

dbt-core PYPI version 0.18.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.0b2 - dbt-bigquery 0.18.0b2 - dbt-postgres 0.18.0b2 - dbt-redshift 0.18.0b2 - dbt-snowflake 0.18.0b2 Source cves: CVE-2024-36105...

dbt (0.18.0rc2), dbt-bigquery (0.18.0rc2) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.18.0rc2)

dbt-core PYPI version 0.18.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.0rc2 - dbt-bigquery 0.18.0rc2 - dbt-postgres 0.18.0rc2 - dbt-redshift 0.18.0rc2 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.19.0b1), dbt-bigquery (0.19.0b1) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.19.0b1)

dbt-core PYPI version 0.19.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0b1 - dbt-bigquery 0.19.0b1 - dbt-postgres 0.19.0b1 - dbt-redshift 0.19.0b1 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.19.1rc2), dbt-bigquery (0.19.1rc2) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.19.1rc2)

dbt-core PYPI version 0.19.1rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.1rc2 - dbt-bigquery 0.19.1rc2 - dbt-postgres 0.19.1rc2 - dbt-redshift 0.19.1rc2 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.19.2rc2), dbt-bigquery (0.19.2rc2) +4 more potentially affected by CVE-2024-36105 via dbt-core (0.19.2rc2)

dbt-core PYPI version 0.19.2rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.2rc2 - dbt-bigquery 0.19.2rc2 - dbt-postgres 0.19.2rc2 - dbt-presto 0.19.2rc2 - dbt-redshift 0.19.2rc2 - dbt-spark 0.19.2rc2 Source...

airflow-dbt-python (>=0.2.0, <=0.5.0), dbt (0.19.2) +14 more potentially affected by CVE-2024-36105 via dbt-core (0.19.2)

dbt-core PYPI version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - airflow-dbt-python =0.2.0, =0.1.0, =0.4.0, =0.1.0, =0.19.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-36105 Source advisory:...

dbt (0.20.2rc1), dbt-bigquery (0.20.2rc1) +5 more potentially affected by CVE-2024-36105 via dbt-core (0.20.2rc1)

dbt-core PYPI version 0.20.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.20.2rc1 - dbt-bigquery 0.20.2rc1 - dbt-postgres 0.20.2rc1 - dbt-presto 0.20.2rc1 - dbt-redshift 0.20.2rc1 - dbt-snowflake 0.20.2rc1 -...

dbt (0.17.2), dbt-bigquery (0.17.2) +7 more potentially affected by CVE-2024-36105 via dbt-core (0.17.2)

dbt-core PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.2 - dbt-bigquery 0.17.2 - dbt-oracle 0.2.0 - dbt-postgres 0.17.2 - dbt-presto 0.17.2 - dbt-redshift 0.17.2 - dbt-snowflake 0.17.2 -...

dbt (0.15.3rc1), dbt-bigquery (0.15.3rc1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.15.3rc1)

dbt-core PYPI version 0.15.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.15.3rc1 - dbt-bigquery 0.15.3rc1 - dbt-postgres 0.15.3rc1 - dbt-redshift 0.15.3rc1 - dbt-snowflake 0.15.3rc1 Source cves: CVE-2024-361...

dbt (0.16.0rc4), dbt-bigquery (0.16.0rc4) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.16.0rc4)

dbt-core PYPI version 0.16.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0rc4 - dbt-bigquery 0.16.0rc4 - dbt-postgres 0.16.0rc4 - dbt-redshift 0.16.0rc4 - dbt-snowflake 0.16.0rc4 Source cves: CVE-2024-361...

dbt (0.16.1rc1), dbt-bigquery (0.16.1rc1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.16.1rc1)

dbt-core PYPI version 0.16.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.1rc1 - dbt-bigquery 0.16.1rc1 - dbt-postgres 0.16.1rc1 - dbt-redshift 0.16.1rc1 - dbt-snowflake 0.16.1rc1 Source cves: CVE-2024-361...

dbt (0.16.1), dbt-bigquery (0.16.1) +6 more potentially affected by CVE-2024-36105 via dbt-core (0.16.1)

dbt-core PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.1 - dbt-bigquery 0.16.1 - dbt-postgres 0.16.1 - dbt-presto 0.16.1 - dbt-redshift 0.16.1 - dbt-snowflake 0.16.1 - dbt-spark 0.16.1 - dd...

dbt (0.17.0b1), dbt-bigquery (0.17.0b1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.17.0b1)

dbt-core PYPI version 0.17.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.0b1 - dbt-bigquery 0.17.0b1 - dbt-postgres 0.17.0b1 - dbt-redshift 0.17.0b1 - dbt-snowflake 0.17.0b1 Source cves: CVE-2024-36105...

dbt (0.18.2rc1), dbt-bigquery (0.18.2rc1) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.18.2rc1)

dbt-core PYPI version 0.18.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.2rc1 - dbt-bigquery 0.18.2rc1 - dbt-postgres 0.18.2rc1 - dbt-redshift 0.18.2rc1 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.19.0rc3), dbt-bigquery (0.19.0rc3) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.19.0rc3)

dbt-core PYPI version 0.19.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0rc3 - dbt-bigquery 0.19.0rc3 - dbt-postgres 0.19.0rc3 - dbt-redshift 0.19.0rc3 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.19.1b2), dbt-bigquery (0.19.1b2) +4 more potentially affected by CVE-2024-36105 via dbt-core (0.19.1b2)

dbt-core PYPI version 0.19.1b2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.1b2 - dbt-bigquery 0.19.1b2 - dbt-postgres 0.19.1b2 - dbt-presto 0.19.1b2 - dbt-redshift 0.19.1b2 - dbt-spark 0.19.1b2 Source cves:...

dbt (0.19.1rc1), dbt-bigquery (0.19.1rc1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.19.1rc1)

dbt-core PYPI version 0.19.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.1rc1 - dbt-bigquery 0.19.1rc1 - dbt-postgres 0.19.1rc1 - dbt-redshift 0.19.1rc1 - dbt-spark 0.19.1rc1 Source cves: CVE-2024-36105...