Junglewise Threat Intelligence
CVE-2026-41490: PYSEC-2026-2432 - Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations
CVE-2026-41490 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: dagster (PyPI). Vendors: PyPI.
Executive brief
Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations
Affected products
- PyPI dagster-gcp
- PyPI dagster-duckdb
- PyPI dagster
- PyPI dagster-snowflake-polars
- PyPI dagster-snowflake
- PyPI dagster-deltalake