HIGH7.8PyPI
PYSEC-2024-66· CVE-2024-40637, GHSA-p3f3-5ccg-83xqModified: 7/19/2024
package
pkg:pypi/dbt-core
Modified: 7/19/2024
dbt allows Binding to an Unrestricted IP Address via socketsocket
Modified: 7/7/2026
dbt-core's secret env vars written to package-lock.json in plaintext
Modified: 12/4/2024
dbt has an implicit override for built-in materializations from installed packages
Modified: 9/10/2026
dbt uses a SQLparse version with a high vulnerability
Modified: 12/5/2024
dbt allows Binding to an Unrestricted IP Address via socketsocket
Modified: 9/10/2026