{"action":"Upgrade dbt-core to 1.6.13 or later.","affected":[{"fixed":"1.6.13","introduced":"1.6.0"},{"fixed":"1.7.13","introduced":"1.7.0"}],"component":"dbt-core","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.6.13","1.7.13"],"ghsa_id":"GHSA-p72q-h37j-3hq7","id":"tcs_01M5KFSJ2DJB8M431TRCHZE3BB","modified_at":"2024-12-05T05:28:27.296870Z","published_at":"2024-04-22T22:17:59Z","references":["https://osv.dev/vulnerability/GHSA-p72q-h37j-3hq7","https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-2m57-hf25-phgg","https://github.com/dbt-labs/dbt-core/security/advisories/GHSA-p72q-h37j-3hq7","https://github.com/dbt-labs/dbt-core","https://security.snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p72q-h37j-3hq7","url":"https://osv.dev/vulnerability/GHSA-p72q-h37j-3hq7"}],"summary":"dbt uses a SQLparse version with a high vulnerability"}