dbt-core
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| dbt has an implicit override for built-in materializations from installed packages | dbt-core | PyPI | Low | Fix reported | |
| dbt allows Binding to an Unrestricted IP Address via socketsocket | dbt-core | PyPI | Medium | Fix reported | |
| dbt-core's secret env vars written to package-lock.json in plaintext | dbt-core | PyPI | Low | Fix reported | |
| dbt uses a SQLparse version with a high vulnerability | dbt-core | PyPI | High | Fix reported |