https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:30:31.899851+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-51481 CVE-2025-51481 2026-10-02T17:30:31.939785+00:00

Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.

 https://cve.radiocsirt.org/vuln/ghsa-h7x8-jv97-fvvm GHSA-h7x8-jv97-fvvm — Dagster Local File Inclusion vulnerability 2026-10-02T17:30:31.939855+00:00

Affected: PyPI: dagster

Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.