CVE-2024-40637: Improper Neutralization of Special Elements in Output Used by a Downstream Component

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user installs a package in dbt, it has the ability to override macros, materializations, and other core components of dbt. This is by design, as it...