Skip to content
OpenAdvisories

Vendor

dbt-labs

9 known vulnerabilities.

Products

dbt-mcp 4 dbt-core 4 dbt-common 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-39382 Public exploit

    dbt has a Command Injection in Reusable Workflow via Unsanitized comment-body Output

    dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Inside the reusable workflow dbt-labs/actions/blob/main/.github/workflows/open-issue-in-repo.yml, the prep job uses pet…

    dbt-labs dbt-core