pypi / dbt-adapter / 0.0.0
Artifact
- dbt_adapter-0.0.0-py3-none-any.whlarchive · retained · retained
Checks
17 of 18 clear Build-time dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓✓
Pipeline✓
Detections0
Network
1 peers- files.pythonhosted.org:8080 ecosystem
| Vulnerabilities6 | Fix | Severity | |
|---|---|---|---|
| Dependencies | |||
| pip 25.1.1 | >=26.2.0 | ||
| CVE-2025-8869 | pip's fallback tar extraction doesn't check symbolic links point to extraction directory | medium | |
| CVE-2026-13346 | pip would incorrectly handle doubly-encoded package URLs from indexes | medium | |
| CVE-2026-3219 | pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files | medium | |
| CVE-2026-6357 | pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere | medium | |
| CVE-2026-8643 | pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory | medium | |
| CVE-2026-1703 | pip Path Traversal vulnerability | low | |
Versions2
1 of 1 jobs captured: build-import success · Generated 2026-11-05 · run 0ff9db88-b067-4212-8234-cc252829a06b
analysis 0.1.0 · 2026-11-04 · bfee307 · graph v2
