CVE-2026-44968 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, rundbtcommand in src/dbtmcp/dbtcli/tools.py appended unsanitized nodeselection and resourcetype values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-di...

CVE-2026-44968 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, rundbtcommand in src/dbtmcp/dbtcli/tools.py appended unsanitized nodeselection and resourcetype values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-di...

CVE-2026-44632

creationtimestamp| type| source ---|---|--- 2026-07-16 16:44:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqron2dykv25 2026-07-16 18:42:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrvbfj4ew2e 2026-07-18 05:07:06+00:00| seen|...

CVE-2023-49900

creationtimestamp| type| source ---|---|--- 2026-07-16 10:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqqztryhh52d 2026-07-16 10:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr2p73vnu2i...

PT-2026-60681

Name of the Vulnerable Software and Affected Versions github.com/kumahq/kuma/v2 versions 2.8.0 through 2.9.15 Description When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, the tool disables TLS verification. This causes API tokens to be transmitte...

CVE-2026-55652

creationtimestamp| type| source ---|---|--- 2026-07-15 22:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5txf2q2w 2026-07-15 23:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7o5jtk26 2026-07-16 01:04:56+00:00| seen|...

CVE-2026-62378

creationtimestamp| type| source ---|---|--- 2026-07-15 17:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o 2026-07-15 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e 2026-07-15 19:12:44+00:00| seen|...

CVE-2026-48336

creationtimestamp| type| source ---|---|--- 2026-07-15 17:03:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqp7bipiyr2c 2026-07-15 17:04:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116925074584278951...

CVE-2026-61736

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w 2026-07-15 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h 2026-07-20 22:35:18+00:00|...

Out-of-bounds Read

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2026-48319

creationtimestamp| type| source ---|---|--- 2026-07-14 23:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndij2r5s2t 2026-07-14 23:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndztabyk2g 2026-07-16 08:07:06+00:00| seen|...

CVE-2026-48284

creationtimestamp| type| source ---|---|--- 2026-07-14 23:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndewdlkw2w 2026-07-14 23:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnds5jgt227 2026-07-16 04:07:06+00:00| seen|...

CVE-2026-54572

creationtimestamp| type| source ---|---|--- 2026-07-14 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncql57ag2c 2026-07-14 23:20:52+00:00| seen| https://bsky.app/profile/potato.software/post/3mqndun2muq2x 2026-07-15 00:24:24+00:00| seen|...

CVE-2026-47302

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:00+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235 2026-07-14 19:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyagoxot25 2026-07-14 20:34:08+00:00| seen|...

CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index

DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory...

CVE-2026-62422

creationtimestamp| type| source ---|---|--- 2026-07-14 10:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqlzlfbgoz2d 2026-07-14 11:50:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5bcqjlj27 2026-07-15 13:03:28+00:00| seen|...

CVE-2026-48364

creationtimestamp| type| source ---|---|--- 2026-07-13 22:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkowz65vj2m 2026-07-13 22:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkp75gusk2l 2026-07-19 17:37:06+00:00| seen|...

CVE-2026-61500

creationtimestamp| type| source ---|---|--- 2026-07-13 18:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkdtvjdak2l 2026-07-13 18:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqke5xrwyk2t 2026-07-14 03:56:17+00:00| seen|...

CVE-2026-15559

creationtimestamp| type| source ---|---|--- 2026-07-13 14:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjvvfcbd52l 2026-07-13 15:58:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2o4m5dg2w 2026-07-13 18:15:31+00:00| seen|...

CVE-2026-61498

creationtimestamp| type| source ---|---|--- 2026-07-13 14:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjuqh3mjq2b 2026-07-13 14:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjwr43qom2q 2026-07-13 17:58:09+00:00| seen|...