Vulnerability PYSEC-2025-102
Medium Risk
MEDIUM RISK
CVSS Score: 6.6
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
July 22, 2025 at 05:15 PM UTC
No summary available
0.3.0 - 0.29.28
0.3.0 - 0.29.28
Details
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.
Impacted packages
Timeline
Published
1 year ago
July 22, 2025 at 05:15 PM UTC
Last Modified
12 hours ago
October 30, 2026 at 03:15 PM UTC