PyPI/dbt-core: high 7.5
dbt uses a SQLparse version with a high vulnerability
Action: Upgrade dbt-core to 1.6.13 or later.
pip install dbt-core==1.6.13pip install dbt-core==1.7.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.6.13 | - |
| 1.7.0 | 1.7.13 | - |
Fixed versions
| 1.6.13 | 1.7.13 |
Sources
- osv: GHSA-p72q-h37j-3hq7
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-2m57-hf25-phgg
- https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-p72q-h37j-3hq7
- https://github.com/dbt-labs/dbt-core
- https://security.snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674
published · modified · JSON