Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

dagster

3 known vulnerabilities (2 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 high, 1 medium
Weekly downloads
2.5M
Dependents
200
Registry
PyPI

Advisories 3

  • Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

    Affected: fixed in 1.13.1.

  • CVE-2025-51481Medium 6.6

    Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbi

    Affected: fixed in 1.10.16.

  • Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive information via…

    Affected: fixed in 1.5.11.