CVE-2024-36105
2 advisories.
PyPI/dbt-core CVE-2024-36105: medium 5.3
dbt allows Binding to an Unrestricted IP Address via socketsocket
Action: Upgrade dbt-core to 1.6.15 or later.
pip install dbt-core==1.6.15pip install dbt-core==1.7.15pip install dbt-core==1.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.15 | - |
| 1.7.0 | 1.7.15 | - |
| 1.8.0 | 1.8.1 | - |
Fixed versions
| 1.6.15 | 1.7.15 | 1.8.1 |
Sources
- osv: GHSA-pmrx-695r-4349
- https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-pmrx-695r-4349
- https://nvd.nist.gov/vuln/detail/CVE-2024-36105
- https://github.com/dbt-labs/dbt-core/issues/10209
- https://github.com/dbt-labs/dbt-core/pull/10208
- https://github.com/dbt-labs/dbt-core/commit/0c08d7a19ad1740be3cb0b2e6d9d64f6537176f7
- https://cwe.mitre.org/data/definitions/1327.html
- https://docs.python.org/3/library/socket.html#socket-families
- https://docs.securesauce.dev/rules/PY030
- https://github.com/dbt-labs/dbt-core
- https://github.com/dbt-labs/dbt-core/blob/main/core/dbt/task/docs/serve.py#L23C38-L23C39
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.6.15
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.7.15
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.8.1
CVE-2024-36105 · published · modified · JSON
PyPI/dbt-core CVE-2024-36105: medium 5.3
dbt allows Binding to an Unrestricted IP Address via socketsocket
Action: Upgrade dbt-core to 1.6.15 or later.
pip install dbt-core==1.6.15pip install dbt-core==1.7.15pip install dbt-core==1.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.15 | - |
| 1.7.0 | 1.7.15 | - |
| 1.8.0 | 1.8.1 | - |
Fixed versions
| 1.6.15 | 1.7.15 | 1.8.1 |
Sources
- osv: PYSEC-2026-1292
- https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-pmrx-695r-4349
- https://nvd.nist.gov/vuln/detail/CVE-2024-36105
- https://github.com/dbt-labs/dbt-core/issues/10209
- https://github.com/dbt-labs/dbt-core/pull/10208
- https://github.com/dbt-labs/dbt-core/commit/0c08d7a19ad1740be3cb0b2e6d9d64f6537176f7
- https://cwe.mitre.org/data/definitions/1327.html
- https://docs.python.org/3/library/socket.html#socket-families
- https://docs.securesauce.dev/rules/PY030
- https://github.com/dbt-labs/dbt-core
- https://github.com/dbt-labs/dbt-core/blob/main/core/dbt/task/docs/serve.py#L23C38-L23C39
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.6.15
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.7.15
- https://github.com/dbt-labs/dbt-core/releases/tag/v1.8.1
- https://pypi.org/project/dbt-core
- https://github.com/advisories/GHSA-pmrx-695r-4349
CVE-2024-36105 · published · modified · JSON