Information Disclosure

dbtcore is vulnerable to Information Disclosure. The vulnerability is caused by logging the Personal Access Token PAT in plaintext to the package-lock.yml file. If an attacker gains access to this file, they can exfiltrate the sensitive PAT token...