CVE-2024-40637

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user installs a package in dbt, it has the ability to override macros, materializations, and other core components of dbt. This is by design, as it...

dbt (0.16.0rc1), dbt-bigquery (0.16.0rc1) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.16.0rc1)

dbt-core PYPI version 0.16.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0rc1 - dbt-bigquery 0.16.0rc1 - dbt-postgres 0.16.0rc1 - dbt-redshift 0.16.0rc1 - dbt-snowflake 0.16.0rc1 Source cves: CVE-2024-406...

dbt (0.16.0), dbt-bigquery (0.16.0) +7 more potentially affected by CVE-2024-40637 via dbt-core (0.16.0)

dbt-core PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0 - dbt-bigquery 0.16.0 - dbt-oracle =0.1.3, =0.1.0, =0.2.0 - dbt-snowflake 0.16.0 - dbt-spark 0.16.0 Source cves: CVE-2024-40637 Sour...

dbt (0.17.0b1), dbt-bigquery (0.17.0b1) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.17.0b1)

dbt-core PYPI version 0.17.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.0b1 - dbt-bigquery 0.17.0b1 - dbt-postgres 0.17.0b1 - dbt-redshift 0.17.0b1 - dbt-snowflake 0.17.0b1 Source cves: CVE-2024-40637...

dbt (0.17.1rc4), dbt-bigquery (0.17.1rc4) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.17.1rc4)

dbt-core PYPI version 0.17.1rc4 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.1rc4 - dbt-bigquery 0.17.1rc4 - dbt-postgres 0.17.1rc4 - dbt-redshift 0.17.1rc4 - dbt-snowflake 0.17.1rc4 Source cves: CVE-2024-406...

dbt (0.17.2rc1), dbt-bigquery (0.17.2rc1) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.17.2rc1)

dbt-core PYPI version 0.17.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.2rc1 - dbt-bigquery 0.17.2rc1 - dbt-postgres 0.17.2rc1 - dbt-redshift 0.17.2rc1 - dbt-snowflake 0.17.2rc1 Source cves: CVE-2024-406...

dbt (0.15.3rc1), dbt-bigquery (0.15.3rc1) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.15.3rc1)

dbt-core PYPI version 0.15.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.15.3rc1 - dbt-bigquery 0.15.3rc1 - dbt-postgres 0.15.3rc1 - dbt-redshift 0.15.3rc1 - dbt-snowflake 0.15.3rc1 Source cves: CVE-2024-406...

dbt (0.16.0b3), dbt-bigquery (0.16.0b3) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.16.0b3)

dbt-core PYPI version 0.16.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0b3 - dbt-bigquery 0.16.0b3 - dbt-postgres 0.16.0b3 - dbt-redshift 0.16.0b3 - dbt-snowflake 0.16.0b3 Source cves: CVE-2024-40637...

dbt (0.16.0rc3), dbt-bigquery (0.16.0rc3) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.16.0rc3)

dbt-core PYPI version 0.16.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0rc3 - dbt-bigquery 0.16.0rc3 - dbt-postgres 0.16.0rc3 - dbt-redshift 0.16.0rc3 - dbt-snowflake 0.16.0rc3 Source cves: CVE-2024-406...

dbt (0.16.1rc1), dbt-bigquery (0.16.1rc1) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.16.1rc1)

dbt-core PYPI version 0.16.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.1rc1 - dbt-bigquery 0.16.1rc1 - dbt-postgres 0.16.1rc1 - dbt-redshift 0.16.1rc1 - dbt-snowflake 0.16.1rc1 Source cves: CVE-2024-406...

dbt (0.16.1), dbt-bigquery (0.16.1) +6 more potentially affected by CVE-2024-40637 via dbt-core (0.16.1)

dbt-core PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.1 - dbt-bigquery 0.16.1 - dbt-postgres 0.16.1 - dbt-presto 0.16.1 - dbt-redshift 0.16.1 - dbt-snowflake 0.16.1 - dbt-spark 0.16.1 - dd...

dbt (0.18.0rc1), dbt-bigquery (0.18.0rc1) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.18.0rc1)

dbt-core PYPI version 0.18.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.0rc1 - dbt-bigquery 0.18.0rc1 - dbt-postgres 0.18.0rc1 - dbt-redshift 0.18.0rc1 - dbt-synapse 0.18.0rc1 Source cves: CVE-2024-40637...

dbt (0.18.2rc1), dbt-bigquery (0.18.2rc1) +2 more potentially affected by CVE-2024-40637 via dbt-core (0.18.2rc1)

dbt-core PYPI version 0.18.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.2rc1 - dbt-bigquery 0.18.2rc1 - dbt-postgres 0.18.2rc1 - dbt-redshift 0.18.2rc1 Source cves: CVE-2024-40637 Source advisory:...

dbt (0.19.0b1), dbt-bigquery (0.19.0b1) +2 more potentially affected by CVE-2024-40637 via dbt-core (0.19.0b1)

dbt-core PYPI version 0.19.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0b1 - dbt-bigquery 0.19.0b1 - dbt-postgres 0.19.0b1 - dbt-redshift 0.19.0b1 Source cves: CVE-2024-40637 Source advisory:...

dbt (0.20.0rc1), dbt-bigquery (0.20.0rc1) +5 more potentially affected by CVE-2024-40637 via dbt-core (0.20.0rc1)

dbt-core PYPI version 0.20.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.20.0rc1 - dbt-bigquery 0.20.0rc1 - dbt-postgres 0.20.0rc1 - dbt-presto 0.20.0rc1 - dbt-redshift 0.20.0rc1 - dbt-snowflake 0.20.0rc1 -...

dbt (0.21.0rc1), dbt-bigquery (0.21.0rc1) +5 more potentially affected by CVE-2024-40637 via dbt-core (0.21.0rc1)

dbt-core PYPI version 0.21.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.21.0rc1 - dbt-bigquery 0.21.0rc1 - dbt-postgres 0.21.0rc1 - dbt-presto 0.21.0rc1 - dbt-redshift 0.21.0rc1 - dbt-snowflake 0.21.0rc1 -...

dbt (0.21.0rc2), dbt-bigquery (0.21.0rc2) +5 more potentially affected by CVE-2024-40637 via dbt-core (0.21.0rc2)

dbt-core PYPI version 0.21.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.21.0rc2 - dbt-bigquery 0.21.0rc2 - dbt-postgres 0.21.0rc2 - dbt-presto 0.21.0rc2 - dbt-redshift 0.21.0rc2 - dbt-snowflake 0.21.0rc2 -...

dbt (0.21.0), dbt-bigquery (0.21.0) +9 more potentially affected by CVE-2024-40637 via dbt-core (0.21.0)

dbt-core PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.21.0 - dbt-bigquery 0.21.0 - dbt-clickhouse 0.21.0 - dbt-dremio 0.21.0.0 - dbt-postgres 0.21.0 - dbt-presto 0.21.0 - dbt-redshift 0.21.0 ...

dbt (0.19.0rc3), dbt-bigquery (0.19.0rc3) +2 more potentially affected by CVE-2024-40637 via dbt-core (0.19.0rc3)

dbt-core PYPI version 0.19.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0rc3 - dbt-bigquery 0.19.0rc3 - dbt-postgres 0.19.0rc3 - dbt-redshift 0.19.0rc3 Source cves: CVE-2024-40637 Source advisory:...

airflow-dbt-python (>=0.2.0, <=0.5.0), dbt (0.19.2) +14 more potentially affected by CVE-2024-40637 via dbt-core (0.19.2)

dbt-core PYPI version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - airflow-dbt-python =0.2.0, =0.1.0, =0.4.0, =0.1.0, =0.19.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-40637 Source advisory: OSV:PYSEC-2024...