Vulnerability	Vulnerable Version
L Directory Traversal dbt-common is a The shared common utilities that dbt-core and adapter implementations use Affected versions of this package are vulnerable to Directory Traversal via the `safe_extract` function. An attacker can write files outside the intended extraction directory by supplying a malicious tarball archive that exploits character-based path prefix validation. The only target paths that can be written to are ones that share a prefix with valid paths. How to fix Directory Traversal? Upgrade `dbt-common` to version 1.34.2, 1.37.3 or higher.	[,1.34.2)[1.35.0,1.37.3)
L Directory Traversal dbt-common is a The shared common utilities that dbt-core and adapter implementations use Affected versions of this package are vulnerable to Directory Traversal in the `safe_extract` process. An attacker can write files to unintended sibling directories by crafting a malicious tarball that exploits character-based prefix matching during extraction. How to fix Directory Traversal? Upgrade `dbt-common` to version 1.34.2, 1.37.3 or higher.	[,1.34.2)[1.35.0,1.37.3)

Directory Traversal

dbt-common is a The shared common utilities that dbt-core and adapter implementations use

Affected versions of this package are vulnerable to Directory Traversal via the safe_extract function. An attacker can write files outside the intended extraction directory by supplying a malicious tarball archive that exploits character-based path prefix validation. The only target paths that can be written to are ones that share a prefix with valid paths.

How to fix Directory Traversal?

Upgrade dbt-common to version 1.34.2, 1.37.3 or higher.

[,1.34.2)[1.35.0,1.37.3)

Directory Traversal

dbt-common is a The shared common utilities that dbt-core and adapter implementations use

Affected versions of this package are vulnerable to Directory Traversal in the safe_extract process. An attacker can write files to unintended sibling directories by crafting a malicious tarball that exploits character-based prefix matching during extraction.

How to fix Directory Traversal?

Upgrade dbt-common to version 1.34.2, 1.37.3 or higher.

[,1.34.2)[1.35.0,1.37.3)

Go back to all versions of this package