Skip to content
OpenAdvisories

Package · PyPI

dagster

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.3
    CVE-2026-41490 Public exploit

    Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

    Dagster is an orchestration platform for the development, production, and observation of data assets. Prior to Dagster Core version 1.13.1 and prior to Dagster libraries version 0.29.1, the DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed S…

    dagster-io dagster dagster dagster-deltalake PyPI
  • Medium 6.6
    CVE-2025-51481

    Dagster Local File Inclusion vulnerability

    Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassin…

    dagster dagster-ge PyPI
  • High 7.5
    CVE-2023-51232

    Dagster vulnerable to Path Traversal attack through its /logs endpoint

    Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive information via crafted request to the /logs endpoint. This may be restricted to certain file names that start with a dot ('.').

    dagster PyPI