VDB
Sign up

package

PyPI/dbt-core

pkg:pypi/dbt-core

LOW3.2PyPI
GHSA-j4g3-3q8x-jxqp

dbt-core's secret env vars written to package-lock.json in plaintext

Modified: 12/4/2024

HIGH7.5PyPI
GHSA-p72q-h37j-3hq7

dbt uses a SQLparse version with a high vulnerability

Modified: 12/5/2024