rudder-server is vulnerable to SQL injection

rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default. Version...

MAL-2024-5182 Malicious code in glovo-data-platform-declarative-airflow (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in glovo-data-platform-declarative-airflow (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5183 Malicious code in glovo-data-platform-importer-brain (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in glovo-data-platform-importer-brain (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in glovo-data-platform-declarative (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5181 Malicious code in glovo-data-platform-declarative (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-observability-validation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5031 Malicious code in data-platform-observability-validation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5030 Malicious code in data-platform-observability-core (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-importer-brain (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5029 Malicious code in data-platform-importer-brain (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-observability-core (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-dbt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5027 Malicious code in data-platform-airflow-recipes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5028 Malicious code in data-platform-dbt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-airflow-recipes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-airflow-operators (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5026 Malicious code in data-platform-airflow-operators (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

Cloud computing and analytics company Snowflake said a "limited number" of its customers have been singled out as part of a targeted campaign. "We have not identified evidence suggesting this activity was caused by a vulnerability, misconfiguration, or breach of Snowflake's platform," the company...