repository icon
dagster-io / dagster Project repository

An orchestration platform for the development, production, and observation of data assets.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN22 DAYS

FIX

WITHINN/A DAYS

Patch coverage gap for CVE-2026-41490 -- dagster-clickhouse partition-key inject...
jaydubya09
self closed
Remote Code Execution via unsafe pickle.load() in Dagster Run Config — any UI us...
texuguinho1234
pending
Unauthenticated Remote Code Execution via GraphQL `launchRun` Mutation
aydinnyunus
pending
PrivateKeys exposed
booboohq
self closed
Code injection
h2oa
duplicate
Critical
CSRF on every GraphQL endpoint allows external attacker to perform any platform...
pinkdraconian
informative
High
Github actions vulnerable to command injection through untrusted context variabl...
dmandefy
informative
Critical