dbt (0.19.0rc1), dbt-bigquery (0.19.0rc1) +5 more potentially affected by CVE-2024-40637 via dbt-core (0.19.0rc1)

dbt-core PYPI version 0.19.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0rc1 - dbt-bigquery 0.19.0rc1 - dbt-mysql 0.19.0rc1 - dbt-postgres 0.19.0rc1 - dbt-presto 0.19.0rc1 - dbt-redshift 0.19.0rc1 -...

dbt (0.16.0rc2), dbt-bigquery (0.16.0rc2) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.16.0rc2)

dbt-core PYPI version 0.16.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0rc2 - dbt-bigquery 0.16.0rc2 - dbt-postgres 0.16.0rc2 - dbt-redshift 0.16.0rc2 - dbt-snowflake 0.16.0rc2 Source cves: CVE-2024-406...

dbt (0.19.0rc2), dbt-bigquery (0.19.0rc2) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.19.0rc2)

dbt-core PYPI version 0.19.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0rc2 - dbt-bigquery 0.19.0rc2 - dbt-postgres 0.19.0rc2 - dbt-redshift 0.19.0rc2 - dbt-sqlserver 0.19.0rc2 Source cves: CVE-2024-406...

dbt (0.18.0b2), dbt-bigquery (0.18.0b2) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.18.0b2)

dbt-core PYPI version 0.18.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.0b2 - dbt-bigquery 0.18.0b2 - dbt-postgres 0.18.0b2 - dbt-redshift 0.18.0b2 - dbt-snowflake 0.18.0b2 Source cves: CVE-2024-40637...

Sensitive Information Disclosure

ethycafides is vulnerable to Information Disclosure. The vulnerability is due to improper masking of nested sensitive fields such as privatekey in the BigQuery connection configuration, which allows an attacker to expose the sensitive fields in plaintext via certain API endpoints...

GHSA-RCVG-JJ3G-RJ7C Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints

The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the application database, and the associated endpoints are no...

CVE-2024-35189

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189

Fides vulnerability CVE-2024-35189 affects the BigQuery connection configuration secrets, where a bug in masking nested sensitive fields allowed plaintext exposure via API endpoints. Affected component: BigQuerySchema secrets structure containing keyfile_creds.private_key exposed in plaintext acr...

CVE-2024-35189

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve "ConnectionConfiguration" records and their associated "secrets" which can contain sensitive data e.g. passwords, private keys, etc.. These "secrets" are stored encrypted at rest in t...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

PT-2024-26368

Name of the Vulnerable Software and Affected Versions Fides versions prior to 2.37.0 Description The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data. These secrets are stored encrypted at rest, a...

CVE-2024-35189: Insertion of Sensitive Information Into Sent Data

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

dbt (0.20.2rc2), dbt-bigquery (0.20.2rc2) +5 more potentially affected by CVE-2024-36105 via dbt-core (0.20.2rc2)

dbt-core PYPI version 0.20.2rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.20.2rc2 - dbt-bigquery 0.20.2rc2 - dbt-postgres 0.20.2rc2 - dbt-presto 0.20.2rc2 - dbt-redshift 0.20.2rc2 - dbt-snowflake 0.20.2rc2 -...

dbt (0.17.0b1), dbt-bigquery (0.17.0b1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.17.0b1)

dbt-core PYPI version 0.17.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.0b1 - dbt-bigquery 0.17.0b1 - dbt-postgres 0.17.0b1 - dbt-redshift 0.17.0b1 - dbt-snowflake 0.17.0b1 Source cves: CVE-2024-36105...

dbt (0.19.0rc3), dbt-bigquery (0.19.0rc3) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.19.0rc3)

dbt-core PYPI version 0.19.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0rc3 - dbt-bigquery 0.19.0rc3 - dbt-postgres 0.19.0rc3 - dbt-redshift 0.19.0rc3 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.16.1), dbt-bigquery (0.16.1) +6 more potentially affected by CVE-2024-36105 via dbt-core (0.16.1)

dbt-core PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.1 - dbt-bigquery 0.16.1 - dbt-postgres 0.16.1 - dbt-presto 0.16.1 - dbt-redshift 0.16.1 - dbt-snowflake 0.16.1 - dbt-spark 0.16.1 - dd...

dbt (0.18.2rc1), dbt-bigquery (0.18.2rc1) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.18.2rc1)

dbt-core PYPI version 0.18.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.2rc1 - dbt-bigquery 0.18.2rc1 - dbt-postgres 0.18.2rc1 - dbt-redshift 0.18.2rc1 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.18.0rc1), dbt-bigquery (0.18.0rc1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.18.0rc1)

dbt-core PYPI version 0.18.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.0rc1 - dbt-bigquery 0.18.0rc1 - dbt-postgres 0.18.0rc1 - dbt-redshift 0.18.0rc1 - dbt-synapse 0.18.0rc1 Source cves: CVE-2024-36105...