Vulnerabilities for dagster

First version without a known vulnerability: 1.13.1

Details

• GHSA-mjw2-v2hm-wj342026-04-18

  Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

  Fixed in: 0.29.1, 1.13.1

• GHSA-h7x8-jv97-fvvm2025-07-22

  Dagster Local File Inclusion vulnerability

  Fixed in: 1.10.16

• GHSA-q93c-p2mw-p23f2025-07-07

  Dagster vulnerable to Path Traversal attack through its /logs endpoint

  Fixed in: 1.5.11