← Back

Dagsterlabs

dagsterlabs

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Dagster
dagster
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-51481
1Dagsterlabs
1Dagster
Jun 17, 2026
Jul 22, 2025
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of...Show more
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.Show less