dbt-core vulnerabilities
CVEs whose affected-version data names the dbt-core package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-40637Medium· 4.2dbt has an implicit override for built-in materializations from installed packages
dbt has an implicit override for built-in materializations from installed packages
▾ Sunlitdbt-core · dbt-coreEPSS 0.37%via OSV
CVE-2024-36105Medium· 5.3dbt allows Binding to an Unrestricted IP Address via socketsocket
dbt allows Binding to an Unrestricted IP Address via socketsocket
▾ Sunlitdbt-core · dbt-coreEPSS 0.71%via OSV