Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 dbt-mcp versions prior to 1.17.1 log sensitive information such as sql_query, vars, and node_selection in plaintext to dbt-mcp.log when file logging is enabled. This occurs because the raw arguments dictionary is logged at INFO level before each tool call and at ERROR level on exceptions. The issue is fixed in version 1.17.1. Join the discussion | CVE Database V5 | 07/16/2026, 17:49:50 UTC Added: 07/16/2026, 18:03:04 UTC |
0 dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabs_vortex.producer.log_proto without redaction, including sql_query from show, vars from run, build, and test, and node_selection from compile, while usage_tracking_enabled in settings.py enabled telemetry by default unless DBT_SEND_ANONYMOUS_USAGE_STATS=false or DO_NOT_TRACK=1 was set. This issue is fixed in version 1.17.1. Join the discussion | CVE Database V5 | 07/16/2026, 17:49:19 UTC Added: 07/16/2026, 18:03:04 UTC |
0 dbt-mcp versions prior to 1.17.1 contain a vulnerability where unsanitized input is appended to subprocess arguments, allowing argument injection of dbt global flags. This flaw is fixed in version 1.17.1. Join the discussion | CVE Database V5 | 07/16/2026, 17:48:29 UTC Added: 07/16/2026, 18:03:04 UTC |
Showing 1 to 3 of 3 results