Skip to content
OpenAdvisories

Package · PyPI

dbt-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.0
    CVE-2026-29790

    dbt-common: commonprefix() doesn't protect against path traversal

    dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's safe_extract() function used when extracting tarball archives. The function uses…

    dbt-labs dbt-common dbt-common PyPI