dbt-mcp
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens | dbt-mcp | PyPI | Medium | Fix reported | |
| dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled | dbt-mcp | PyPI | Low | Fix reported | |
| dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction | dbt-mcp | PyPI | Low | Fix reported | |
| dbt MCP Server has an Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters | dbt-mcp | PyPI | Medium | Fix reported |