Products: 3
Vulnerabilities: 5
Known Exploited: 0
0
Critical Level Threats
0
High Level Threats
2
Medium Level Threats
2
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-44969
dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled
Last Modified: Jul 28, 2026
Published: Jul 16, 2026
CVE-2026-44970
dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction
Last Modified: Jul 28, 2026
Published: Jul 16, 2026
CVE-2026-44968
dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters
Last Modified: Jul 28, 2026
Published: Jul 16, 2026
CVE-2026-39382
dbt has a Command Injection in Reusable Workflow via Unsanitized comment-body Output
Last Modified: Apr 16, 2026
Published: Apr 07, 2026
CVE-2026-29790
dbt-common: commonprefix() doesn't protect against path traversal
Last Modified: Apr 16, 2026
Published: Mar 06, 2026
Items Per Page
