Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2437
  • PyPI/dagster-snowflake-polars
 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-2433
  • PyPI/dagster-deltalake
 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-2432
  • PyPI/dagster
 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-2435
  • PyPI/dagster-gcp
 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-2436
  • PyPI/dagster-snowflake
 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-2434
  • PyPI/dagster-duckdb
 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-1286
  • PyPI/dagster
 Dagster Local File Inclusion vulnerability 07 Jul
  • Fix available
  • Severity - 6.6 (Medium)
PYSEC-2026-1287
  • PyPI/dagster
 Dagster vulnerable to Path Traversal attack through its /logs endpoint 07 Jul
  • Fix available
  • Severity - 4.4 (Medium)
GHSA-mjw2-v2hm-wj34
  • PyPI/dagster
  • PyPI/dagster-deltalake
  • PyPI/dagster-duckdb
  • PyPI/dagster-gcp
  • PyPI/dagster-snowflake
  • ... 1 more
 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 18 Apr
  • Fix available
  • Severity - 8.3 (High)
GHSA-h7x8-jv97-fvvm
  • PyPI/dagster
 Dagster Local File Inclusion vulnerability 22 Jul 2025
  • Fix available
  • Severity - 6.6 (Medium)
PYSEC-2025-102
  • PyPI/dagster-ge
 See record for full details 22 Jul 2025
  • No fix available
  • Severity - 6.6 (Medium)
GHSA-q93c-p2mw-p23f
  • PyPI/dagster
 Dagster vulnerable to Path Traversal attack through its /logs endpoint 07 Jul 2025
  • Fix available
  • Severity - 4.4 (Medium)