Analysis

Author: github-actions

vulns/dagster-ge/PYSEC-2025-102.yaml

@@ -646,14 +646,15 @@ affected:
   - 0.29.8
   - 0.29.9
   - 0.29.10
+  - 0.29.11
 aliases:
 - CVE-2025-51481
 details: Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14
   allows attackers with access to the gRPC server to read arbitrary files by supplying
   path traversal sequences in the notebook_path field of ExternalNotebookData requests,
   bypassing the intended extension-based check.
 id: PYSEC-2025-102
-modified: '2026-06-18T19:35:32.355142Z'
+modified: '2026-06-25T18:02:03.637421Z'
 published: '2025-07-22T17:15:33.543Z'
 references:
 - type: REPORT