{"id":"CVE-2025-51481","aliases":["EUVD-2025-22342","GHSA-h7x8-jv97-fvvm","PYSEC-2025-102","PYSEC-2026-1286"],"status":"published","title":"Dagster Local File Inclusion vulnerability","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00621,"percentile":0.50252,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2025-07-22T00:00:00Z","modified":"2026-11-05T18:30:02Z","fixes":[{"ecosystem":"PyPI","package":"dagster","fixed_in":["1.10.16"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"dagster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.16"}]}]},{"source":"osv","ecosystem":"PyPI","package":"dagster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.16"}]}],"versions":["0.1.0rc1","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.9","0.10.0","0.10.0rc0","0.10.1","0.10.1rc0","0.10.2","0.10.2rc0","0.10.3","0.10.3rc0","0.10.4","0.10.4rc0","0.10.5","0.10.5rc0","0.10.6","0.10.6rc0","0.10.7","0.10.7rc0","0.10.8","0.10.8rc0","0.10.9","0.11.0","0.11.0rc0","0.11.1","0.11.10","0.11.10rc0","0.11.10rc1","0.11.10rc2","0.11.11","0.11.11rc1","0.11.11rc5","0.11.11rc7","0.11.12","0.11.12rc0","0.11.12rc2","0.11.12rc3","0.11.13","0.11.13rc1","0.11.13rc2","0.11.13rc3","0.11.13rc5","0.11.14","0.11.14rc0","0.11.14rc1","0.11.14rc2","0.11.14rc3","0.11.14rc4","0.11.14rc5","0.11.14rc6","0.11.14rc7","0.11.14rc8","0.11.15","0.11.15rc0","0.11.15rc1","0.11.16","0.11.16rc10","0.11.16rc18","0.11.1rc0","0.11.2","0.11.2rc0","0.11.3","0.11.3rc0","0.11.4","0.11.4rc0","0.11.5","0.11.5rc0","0.11.5rc1","0.11.6","0.11.6rc10","0.11.6rc11","0.11.6rc13","0.11.6rc14","0.11.6rc15","0.11.6rc16","0.11.6rc17","0.11.6rc18","0.11.6rc19","0.11.6rc20","0.11.6rc21","0.11.6rc22","0.11.6rc23","0.11.6rc24","0.11.6rc25","0.11.6rc26","0.11.6rc27","0.11.6rc28","0.11.6rc29","0.11.6rc30","0.11.6rc31","0.11.6rc32","0.11.6rc5","0.11.6rc7","0.11.6rc8","0.11.6rc9","0.11.7","0.11.7rc1","0.11.7rc10","0.11.7rc13","0.11.7rc14","0.11.7rc2","0.11.7rc3","0.11.7rc4","0.11.7rc6","0.11.7rc7","0.11.7rc8","0.11.7rc9","0.11.8","0.11.8rc3","0.11.8rc4","0.11.8rc5","0.11.9","0.11.9rc10","0.11.9rc11","0.11.9rc12","0.11.9rc6","0.11.9rc7","0.11.9rc8","0.12.0","0.12.0rc0","0.12.1","0.12.10","0.12.10rc0","0.12.10rc1","0.12.11","0.12.11rc0","0.12.12","0.12.12rc0","0.12.13","0.12.13rc0","0.12.14","0.12.14rc0","0.12.14rc1","0.12.14rc2","0.12.15","0.12.15rc0","0.12.15rc2","0.12.1rc0","0.12.2","0.12.2rc0","0.12.3","0.12.3rc0","0.12.3rc1","0.12.4","0.12.4rc0","0.12.4rc1","0.12.5","0.12.5rc0","0.12.6","0.12.6rc0","0.12.7","0.12.7rc0","0.12.8","0.12.8rc0","0.12.9","0.12.9rc0","0.12.9rc1","0.12.9rc2","0.13.0","0.13.0rc0","0.13.1","0.13.10","0.13.10rc0","0.13.10rc1","0.13.10rc2","0.13.10rc3","0.13.11","0.13.11rc0","0.13.12","0.13.12rc2","0.13.13","0.13.13rc0","0.13.14","0.13.14rc0","0.13.15","0.13.15rc0","0.13.16","0.13.16rc0","0.13.17","0.13.17rc0","0.13.18","0.13.18rc0","0.13.19","0.13.19rc2","0.13.1rc0","0.13.2","0.13.2rc0","0.13.2rc1","0.13.2rc2","0.13.3","0.13.3rc0","0.13.4","0.13.4rc0","0.13.5","0.13.5rc0","0.13.6","0.13.6rc0","0.13.7","0.13.7rc0","0.13.8","0.13.8rc0","0.13.9","0.13.9rc0","0.14.0","0.14.0rc0","0.14.1","0.14.10","0.14.11","0.14.12","0.14.13","0.14.14","0.14.15","0.14.16","0.14.16rc2","0.14.16rc3","0.14.16rc4","0.14.17","0.14.17rc10","0.14.17rc3","0.14.17rc4","0.14.17rc5","0.14.17rc6","0.14.17rc7","0.14.17rc8","0.14.18","0.14.18rc2","0.14.18rc3","0.14.18rc4","0.14.18rc5","0.14.18rc6","0.14.19","0.14.1rc0","0.14.2","0.14.20","0.14.20rc0","0.14.21rc0","0.14.2rc0","0.14.3","0.14.3rc0","0.14.4","0.14.4rc0","0.14.5","0.14.5rc0","0.14.6","0.14.6rc0","0.14.7","0.14.7rc0","0.14.8","0.14.8rc1","0.14.9","0.14.9rc0","0.15.0","0.15.1","0.15.10","0.15.2","0.15.3","0.15.4","0.15.5","0.15.6","0.15.7","0.15.8","0.15.9","0.2.0","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.2.7.1","0.2.8","0.2.8.post0","0.2.8.post3","0.3.0","0.3.0.post2","0.3.0.post3","0.3.0a10","0.3.0a12","0.3.0a13","0.3.0a9","0.3.0rc7","0.3.1","0.3.1rc0","0.3.2","0.3.3.post0","0.3.3.post1","0.3.4","0.3.5","0.4.0","0.4.0rc2","0.4.3","0.4.3.post2","0.4.3.post4","0.4.3rc1","0.5.0","0.5.0rc0","0.5.0rc2","0.5.0rc3","0.5.0rc4","0.5.1","0.5.1rc0","0.5.2","0.5.2.post2","0.5.2.post3","0.5.2rc0","0.5.3","0.5.4","0.5.4rc0","0.5.5","0.5.5rc0","0.5.6","0.5.6rc2","0.5.7","0.5.7rc0","0.5.8","0.5.8rc0","0.5.9","0.5.9rc0","0.6.0","0.6.0.post0","0.6.0rc0","0.6.0rc1","0.6.1","0.6.1rc1","0.6.2","0.6.2rc0","0.6.2rc1","0.6.2rc2","0.6.3","0.6.3rc0","0.6.3rc2","0.6.4","0.6.4rc0","0.6.4rc3","0.6.5","0.6.5rc1","0.6.5rc2","0.6.5rc3","0.6.6","0.6.6rc0","0.6.6rc1","0.6.7","0.6.7.post0","0.6.7rc0","0.6.8","0.6.8rc0","0.6.8rc1","0.6.8rc2","0.6.9","0.7.0","0.7.0rc0","0.7.0rc1","0.7.1","0.7.10","0.7.10rc0","0.7.11","0.7.11.post0","0.7.11rc0","0.7.12","0.7.12rc0","0.7.13","0.7.13rc0","0.7.14","0.7.14rc0","0.7.15","0.7.15rc0","0.7.16","0.7.16rc0","0.7.1rc0","0.7.2","0.7.2rc0","0.7.3","0.7.3rc1","0.7.4","0.7.4rc0","0.7.5","0.7.5rc0","0.7.6","0.7.6rc0","0.7.7","0.7.7rc0","0.7.8","0.7.8rc0","0.7.9","0.7.9rc0","0.8.0","0.8.0rc0","0.8.1","0.8.10","0.8.10rc0","0.8.10rc1","0.8.10rc2","0.8.1rc0","0.8.2","0.8.2rc0","0.8.2rc1","0.8.3","0.8.3rc0","0.8.4","0.8.4rc0","0.8.5","0.8.5rc0","0.8.6","0.8.6rc1","0.8.7","0.8.7rc0","0.8.8","0.8.8rc0","0.8.9","0.8.9rc0","0.9.0","0.9.0rc0","0.9.1","0.9.10","0.9.10.post0","0.9.11","0.9.11rc0","0.9.12","0.9.12rc0","0.9.12rc1","0.9.13","0.9.13rc0","0.9.14","0.9.14rc0","0.9.15","0.9.15rc0","0.9.16","0.9.16rc0","0.9.17","0.9.17rc0","0.9.18","0.9.18rc0","0.9.19","0.9.19rc0","0.9.1rc0","0.9.1rc1","0.9.2","0.9.20","0.9.20rc0","0.9.21","0.9.21rc0","0.9.22","0.9.22.post0","0.9.22rc0","0.9.22rc1","0.9.2rc0","0.9.3","0.9.3rc0","0.9.4","0.9.4rc0","0.9.5","0.9.5rc1","0.9.6","0.9.6rc0","0.9.7","0.9.7rc0","0.9.8","0.9.8rc0","0.9.9","0.9.9rc1","1.0.0","1.0.0rc2","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.1.0","1.1.1","1.1.10","1.1.11","1.1.12","1.1.13","1.1.14","1.1.15","1.1.16rc0","1.1.17","1.1.17rc0","1.1.18","1.1.19","1.1.2","1.1.20","1.1.21","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.10.0","1.10.1","1.10.10","1.10.11","1.10.11rc0","1.10.11rc1","1.10.12","1.10.13","1.10.14","1.10.15","1.10.2","1.10.3","1.10.4","1.10.5","1.10.6","1.10.6rc0","1.10.7","1.10.7rc0","1.10.8","1.10.9","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.3.0","1.3.1","1.3.10","1.3.11","1.3.12","1.3.13","1.3.14","1.3.14rc0","1.3.14rc1","1.3.14rc2","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.3.7","1.3.8","1.3.9","1.3.9rc0","1.4.0","1.4.1","1.4.10","1.4.11","1.4.12","1.4.12rc0","1.4.13","1.4.13rc0","1.4.13rc1","1.4.14","1.4.15","1.4.16","1.4.17","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7","1.4.8","1.4.9","1.5.0","1.5.1","1.5.10","1.5.11","1.5.12","1.5.13","1.5.14","1.5.14rc0","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.5.9","1.6.0","1.6.1","1.6.10","1.6.11","1.6.12","1.6.13","1.6.14","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.1","1.7.10","1.7.11","1.7.12","1.7.13","1.7.14","1.7.15","1.7.16","1.7.2","1.7.2rc1","1.7.2rc2","1.7.2rc3","1.7.2rc4","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.7.9rc0","1.8.0","1.8.1","1.8.10","1.8.11","1.8.12","1.8.13","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","1.8.7","1.8.8","1.8.9","1.9.0","1.9.1","1.9.10","1.9.11","1.9.12","1.9.13","1.9.2","1.9.3","1.9.4","1.9.4rc0","1.9.5","1.9.6","1.9.7","1.9.8","1.9.9"]},{"source":"osv","ecosystem":"PyPI","package":"dagster-ge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.10.14"}]}],"versions":["0.10.0","0.10.0rc0","0.10.1","0.10.1rc0","0.10.2","0.10.2rc0","0.10.3","0.10.3rc0","0.10.4","0.10.4rc0","0.10.5","0.10.5rc0","0.10.6","0.10.6rc0","0.10.7","0.10.7rc0","0.10.8","0.10.8rc0","0.10.9","0.11.0","0.11.0rc0","0.11.1","0.11.10","0.11.10rc0","0.11.10rc1","0.11.10rc2","0.11.11","0.11.11rc1","0.11.11rc5","0.11.11rc7","0.11.12","0.11.12rc0","0.11.12rc2","0.11.12rc3","0.11.13","0.11.13rc2","0.11.13rc3","0.11.13rc5","0.11.14","0.11.14rc0","0.11.14rc1","0.11.14rc2","0.11.14rc3","0.11.14rc4","0.11.14rc5","0.11.14rc7","0.11.14rc8","0.11.15","0.11.15rc0","0.11.15rc1","0.11.16","0.11.16rc10","0.11.16rc18","0.11.1rc0","0.11.2","0.11.2rc0","0.11.3","0.11.3rc0","0.11.4","0.11.4rc0","0.11.5","0.11.5rc0","0.11.5rc1","0.11.6","0.11.6rc11","0.11.6rc13","0.11.6rc14","0.11.6rc15","0.11.6rc16","0.11.6rc17","0.11.6rc18","0.11.6rc19","0.11.6rc20","0.11.6rc21","0.11.6rc22","0.11.6rc23","0.11.6rc24","0.11.6rc25","0.11.6rc26","0.11.6rc27","0.11.6rc28","0.11.6rc29","0.11.6rc31","0.11.6rc32","0.11.6rc5","0.11.6rc7","0.11.6rc8","0.11.6rc9","0.11.7","0.11.7rc1","0.11.7rc10","0.11.7rc13","0.11.7rc14","0.11.7rc2","0.11.7rc3","0.11.7rc4","0.11.7rc6","0.11.7rc7","0.11.7rc8","0.11.7rc9","0.11.8","0.11.8rc4","0.11.8rc5","0.11.9","0.11.9rc10","0.11.9rc11","0.11.9rc12","0.11.9rc6","0.11.9rc7","0.11.9rc8","0.12.0","0.12.0rc0","0.12.1","0.12.10","0.12.10rc0","0.12.10rc1","0.12.11","0.12.11rc0","0.12.12","0.12.12rc0","0.12.13","0.12.13rc0","0.12.14","0.12.14rc0","0.12.14rc1","0.12.14rc2","0.12.15","0.12.15rc2","0.12.1rc0","0.12.2","0.12.2rc0","0.12.3","0.12.3rc1","0.12.4","0.12.4rc0","0.12.4rc1","0.12.5","0.12.5rc0","0.12.6","0.12.6rc0","0.12.7","0.12.7rc0","0.12.8","0.12.8rc0","0.12.9","0.12.9rc0","0.12.9rc1","0.12.9rc2","0.13.0","0.13.0rc0","0.13.1","0.13.10","0.13.10rc3","0.13.11","0.13.11rc0","0.13.12","0.13.12rc2","0.13.13","0.13.13rc0","0.13.14","0.13.14rc0","0.13.15","0.13.15rc0","0.13.16","0.13.16rc0","0.13.17","0.13.17rc0","0.13.18","0.13.18rc0","0.13.19","0.13.19rc2","0.13.1rc0","0.13.2","0.13.2rc0","0.13.2rc2","0.13.3","0.13.3rc0","0.13.4","0.13.4rc0","0.13.5","0.13.5rc0","0.13.6","0.13.6rc0","0.13.7","0.13.7rc0","0.13.8","0.13.8rc0","0.13.9","0.13.9rc0","0.14.0","0.14.0rc0","0.14.1","0.14.10","0.14.11","0.14.12","0.14.13","0.14.14","0.14.15","0.14.16","0.14.16rc2","0.14.16rc3","0.14.16rc4","0.14.17","0.14.17rc10","0.14.17rc3","0.14.17rc4","0.14.17rc5","0.14.17rc6","0.14.17rc7","0.14.17rc8","0.14.18","0.14.18rc2","0.14.18rc3","0.14.18rc4","0.14.18rc5","0.14.18rc6","0.14.19","0.14.1rc0","0.14.2","0.14.20","0.14.20rc0","0.14.21rc0","0.14.2rc0","0.14.3","0.14.3rc0","0.14.4","0.14.4rc0","0.14.5","0.14.5rc0","0.14.6","0.14.6rc0","0.14.7","0.14.7rc0","0.14.8","0.14.8rc1","0.14.9","0.14.9rc0","0.15.0","0.15.1","0.15.10","0.15.2","0.15.3","0.15.4","0.15.5","0.15.6","0.15.7","0.15.8","0.15.9","0.16.0","0.16.0rc2","0.16.1","0.16.10","0.16.11","0.16.12","0.16.13","0.16.14","0.16.15","0.16.16","0.16.17","0.16.2","0.16.3","0.16.4","0.16.6","0.16.7","0.16.8","0.16.9","0.17.1","0.17.10","0.17.11","0.17.12","0.17.13","0.17.14","0.17.15","0.17.16","0.17.17","0.17.17rc0","0.17.18","0.17.19","0.17.2","0.17.20","0.17.21","0.17.3","0.17.4","0.17.5","0.17.6","0.17.7","0.17.8","0.17.9","0.18.0","0.18.1","0.18.2","0.18.3","0.18.4","0.18.5","0.18.6","0.18.7","0.19.0","0.19.1","0.19.10","0.19.11","0.19.12","0.19.13","0.19.14","0.19.14rc1","0.19.14rc2","0.19.2","0.19.3","0.19.4","0.19.5","0.19.6","0.19.7","0.19.8","0.19.9","0.19.9rc0","0.20.0","0.20.1","0.20.10","0.20.11","0.20.12","0.20.13","0.20.13rc0","0.20.13rc1","0.20.14","0.20.15","0.20.16","0.20.17","0.20.2","0.20.3","0.20.4","0.20.5","0.20.6","0.20.7","0.20.8","0.20.9","0.21.0","0.21.1","0.21.10","0.21.11","0.21.12","0.21.13","0.21.14","0.21.14rc0","0.21.2","0.21.3","0.21.4","0.21.5","0.21.6","0.21.7","0.21.8","0.21.9","0.22.0","0.22.1","0.22.10","0.22.11","0.22.12","0.22.13","0.22.14","0.22.2","0.22.3","0.22.4","0.22.5","0.22.6","0.22.7","0.22.8","0.22.9","0.23.0","0.23.1","0.23.10","0.23.11","0.23.12","0.23.13","0.23.14","0.23.15","0.23.16","0.23.2","0.23.2rc1","0.23.2rc2","0.23.2rc3","0.23.2rc4","0.23.3","0.23.4","0.23.5","0.23.6","0.23.7","0.23.8","0.23.9","0.23.9rc0","0.24.0","0.24.1","0.24.10","0.24.11","0.24.12","0.24.13","0.24.2","0.24.3","0.24.4","0.24.5","0.24.6","0.24.7","0.24.8","0.24.9","0.25.0","0.25.1","0.25.10","0.25.11","0.25.12","0.25.13","0.25.2","0.25.3","0.25.4","0.25.4rc0","0.25.5","0.25.6","0.25.7","0.25.8","0.25.9","0.26.0","0.26.1","0.26.10","0.26.11","0.26.11rc0","0.26.11rc1","0.26.12","0.26.13","0.26.14","0.26.15","0.26.16","0.26.17","0.26.18","0.26.18rc0","0.26.18rc1","0.26.18rc2","0.26.19","0.26.2","0.26.20","0.26.21","0.26.3","0.26.4","0.26.5","0.26.6","0.26.6rc0","0.26.7","0.26.7rc0","0.26.8","0.26.9","0.27.0","0.27.1","0.27.10","0.27.11","0.27.12","0.27.13","0.27.14","0.27.15","0.27.16","0.27.2","0.27.3","0.27.4","0.27.5","0.27.6","0.27.7","0.27.8","0.27.9","0.28.0","0.28.1","0.28.10","0.28.11","0.28.12","0.28.13","0.28.13rc0","0.28.14","0.28.14rc2","0.28.14rc3","0.28.14rc4","0.28.15","0.28.15rc3","0.28.15rc4","0.28.16","0.28.16rc1","0.28.17","0.28.17rc0","0.28.18","0.28.19","0.28.2","0.28.20","0.28.21","0.28.22","0.28.3","0.28.4","0.28.5","0.28.6","0.28.7","0.28.8","0.28.9","0.29.0","0.29.1","0.29.10","0.29.11","0.29.12","0.29.13","0.29.14","0.29.15","0.29.16","0.29.17","0.29.18","0.29.19","0.29.2","0.29.20","0.29.21","0.29.22","0.29.23","0.29.24","0.29.25","0.29.26","0.29.27","0.29.28","0.29.29","0.29.3","0.29.4","0.29.5","0.29.5rc0","0.29.6","0.29.7","0.29.8","0.29.9","0.3.0","0.3.0.post2","0.3.0.post3","0.3.3.post1","0.3.4","0.3.5","0.4.0","0.4.0rc2","0.4.3","0.4.3.post2","0.4.3.post4","0.4.3rc1","0.5.0","0.5.0rc0","0.5.0rc2","0.5.0rc3","0.5.0rc4","0.5.1","0.5.1rc0","0.5.2","0.5.2.post2","0.5.2.post3","0.5.2rc0","0.5.3","0.5.4","0.5.4rc0","0.5.5","0.5.5rc0","0.5.6","0.5.6rc2","0.5.7","0.5.7rc0","0.5.8","0.5.8rc0","0.5.9","0.5.9rc0","0.6.0","0.6.0.post0","0.6.0rc0","0.6.0rc1","0.6.1","0.6.1rc1","0.6.2","0.6.2rc0","0.6.2rc1","0.6.2rc2","0.6.3","0.6.3rc0","0.6.3rc2","0.6.4","0.6.4rc0","0.6.4rc3","0.6.5","0.6.5rc3","0.6.6","0.6.6rc1","0.6.7","0.6.7.post0","0.6.7rc0","0.6.8","0.6.8rc2","0.6.9","0.7.0","0.7.0rc0","0.7.0rc1","0.7.1","0.7.1rc0","0.7.2","0.7.2rc0","0.7.3","0.7.3rc1","0.8.10","0.8.10rc0","0.8.10rc1","0.8.10rc2","0.8.6","0.8.6rc1","0.8.7","0.8.7rc0","0.8.8","0.8.8rc0","0.8.9","0.8.9rc0","0.9.0","0.9.0rc0","0.9.1","0.9.10.post0","0.9.11","0.9.11rc0","0.9.12","0.9.12rc0","0.9.12rc1","0.9.13","0.9.13rc0","0.9.14","0.9.14rc0","0.9.15","0.9.15rc0","0.9.16","0.9.16rc0","0.9.17","0.9.17rc0","0.9.18","0.9.18rc0","0.9.19","0.9.19rc0","0.9.1rc0","0.9.1rc1","0.9.2","0.9.20","0.9.20rc0","0.9.21","0.9.21rc0","0.9.22","0.9.22.post0","0.9.22rc1","0.9.2rc0","0.9.3","0.9.3rc0","0.9.4","0.9.4rc0","0.9.5","0.9.5rc1","0.9.6","0.9.6rc0","0.9.7","0.9.7rc0","0.9.8","0.9.8rc0","0.9.9","0.9.9rc1"]},{"source":"osv","ecosystem":"PyPI","package":"dagster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.16"}]}],"versions":["0.1.0rc1","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.9","0.10.0","0.10.0rc0","0.10.1","0.10.1rc0","0.10.2","0.10.2rc0","0.10.3","0.10.3rc0","0.10.4","0.10.4rc0","0.10.5","0.10.5rc0","0.10.6","0.10.6rc0","0.10.7","0.10.7rc0","0.10.8","0.10.8rc0","0.10.9","0.11.0","0.11.0rc0","0.11.1","0.11.10","0.11.10rc0","0.11.10rc1","0.11.10rc2","0.11.11","0.11.11rc1","0.11.11rc5","0.11.11rc7","0.11.12","0.11.12rc0","0.11.12rc2","0.11.12rc3","0.11.13","0.11.13rc1","0.11.13rc2","0.11.13rc3","0.11.13rc5","0.11.14","0.11.14rc0","0.11.14rc1","0.11.14rc2","0.11.14rc3","0.11.14rc4","0.11.14rc5","0.11.14rc6","0.11.14rc7","0.11.14rc8","0.11.15","0.11.15rc0","0.11.15rc1","0.11.16","0.11.16rc10","0.11.16rc18","0.11.1rc0","0.11.2","0.11.2rc0","0.11.3","0.11.3rc0","0.11.4","0.11.4rc0","0.11.5","0.11.5rc0","0.11.5rc1","0.11.6","0.11.6rc10","0.11.6rc11","0.11.6rc13","0.11.6rc14","0.11.6rc15","0.11.6rc16","0.11.6rc17","0.11.6rc18","0.11.6rc19","0.11.6rc20","0.11.6rc21","0.11.6rc22","0.11.6rc23","0.11.6rc24","0.11.6rc25","0.11.6rc26","0.11.6rc27","0.11.6rc28","0.11.6rc29","0.11.6rc30","0.11.6rc31","0.11.6rc32","0.11.6rc5","0.11.6rc7","0.11.6rc8","0.11.6rc9","0.11.7","0.11.7rc1","0.11.7rc10","0.11.7rc13","0.11.7rc14","0.11.7rc2","0.11.7rc3","0.11.7rc4","0.11.7rc6","0.11.7rc7","0.11.7rc8","0.11.7rc9","0.11.8","0.11.8rc3","0.11.8rc4","0.11.8rc5","0.11.9","0.11.9rc10","0.11.9rc11","0.11.9rc12","0.11.9rc6","0.11.9rc7","0.11.9rc8","0.12.0","0.12.0rc0","0.12.1","0.12.10","0.12.10rc0","0.12.10rc1","0.12.11","0.12.11rc0","0.12.12","0.12.12rc0","0.12.13","0.12.13rc0","0.12.14","0.12.14rc0","0.12.14rc1","0.12.14rc2","0.12.15","0.12.15rc0","0.12.15rc2","0.12.1rc0","0.12.2","0.12.2rc0","0.12.3","0.12.3rc0","0.12.3rc1","0.12.4","0.12.4rc0","0.12.4rc1","0.12.5","0.12.5rc0","0.12.6","0.12.6rc0","0.12.7","0.12.7rc0","0.12.8","0.12.8rc0","0.12.9","0.12.9rc0","0.12.9rc1","0.12.9rc2","0.13.0","0.13.0rc0","0.13.1","0.13.10","0.13.10rc0","0.13.10rc1","0.13.10rc2","0.13.10rc3","0.13.11","0.13.11rc0","0.13.12","0.13.12rc2","0.13.13","0.13.13rc0","0.13.14","0.13.14rc0","0.13.15","0.13.15rc0","0.13.16","0.13.16rc0","0.13.17","0.13.17rc0","0.13.18","0.13.18rc0","0.13.19","0.13.19rc2","0.13.1rc0","0.13.2","0.13.2rc0","0.13.2rc1","0.13.2rc2","0.13.3","0.13.3rc0","0.13.4","0.13.4rc0","0.13.5","0.13.5rc0","0.13.6","0.13.6rc0","0.13.7","0.13.7rc0","0.13.8","0.13.8rc0","0.13.9","0.13.9rc0","0.14.0","0.14.0rc0","0.14.1","0.14.10","0.14.11","0.14.12","0.14.13","0.14.14","0.14.15","0.14.16","0.14.16rc2","0.14.16rc3","0.14.16rc4","0.14.17","0.14.17rc10","0.14.17rc3","0.14.17rc4","0.14.17rc5","0.14.17rc6","0.14.17rc7","0.14.17rc8","0.14.18","0.14.18rc2","0.14.18rc3","0.14.18rc4","0.14.18rc5","0.14.18rc6","0.14.19","0.14.1rc0","0.14.2","0.14.20","0.14.20rc0","0.14.21rc0","0.14.2rc0","0.14.3","0.14.3rc0","0.14.4","0.14.4rc0","0.14.5","0.14.5rc0","0.14.6","0.14.6rc0","0.14.7","0.14.7rc0","0.14.8","0.14.8rc1","0.14.9","0.14.9rc0","0.15.0","0.15.1","0.15.10","0.15.2","0.15.3","0.15.4","0.15.5","0.15.6","0.15.7","0.15.8","0.15.9","0.2.0","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.2.7.1","0.2.8","0.2.8.post0","0.2.8.post3","0.3.0","0.3.0.post2","0.3.0.post3","0.3.0a10","0.3.0a12","0.3.0a13","0.3.0a9","0.3.0rc7","0.3.1","0.3.1rc0","0.3.2","0.3.3.post0","0.3.3.post1","0.3.4","0.3.5","0.4.0","0.4.0rc2","0.4.3","0.4.3.post2","0.4.3.post4","0.4.3rc1","0.5.0","0.5.0rc0","0.5.0rc2","0.5.0rc3","0.5.0rc4","0.5.1","0.5.1rc0","0.5.2","0.5.2.post2","0.5.2.post3","0.5.2rc0","0.5.3","0.5.4","0.5.4rc0","0.5.5","0.5.5rc0","0.5.6","0.5.6rc2","0.5.7","0.5.7rc0","0.5.8","0.5.8rc0","0.5.9","0.5.9rc0","0.6.0","0.6.0.post0","0.6.0rc0","0.6.0rc1","0.6.1","0.6.1rc1","0.6.2","0.6.2rc0","0.6.2rc1","0.6.2rc2","0.6.3","0.6.3rc0","0.6.3rc2","0.6.4","0.6.4rc0","0.6.4rc3","0.6.5","0.6.5rc1","0.6.5rc2","0.6.5rc3","0.6.6","0.6.6rc0","0.6.6rc1","0.6.7","0.6.7.post0","0.6.7rc0","0.6.8","0.6.8rc0","0.6.8rc1","0.6.8rc2","0.6.9","0.7.0","0.7.0rc0","0.7.0rc1","0.7.1","0.7.10","0.7.10rc0","0.7.11","0.7.11.post0","0.7.11rc0","0.7.12","0.7.12rc0","0.7.13","0.7.13rc0","0.7.14","0.7.14rc0","0.7.15","0.7.15rc0","0.7.16","0.7.16rc0","0.7.1rc0","0.7.2","0.7.2rc0","0.7.3","0.7.3rc1","0.7.4","0.7.4rc0","0.7.5","0.7.5rc0","0.7.6","0.7.6rc0","0.7.7","0.7.7rc0","0.7.8","0.7.8rc0","0.7.9","0.7.9rc0","0.8.0","0.8.0rc0","0.8.1","0.8.10","0.8.10rc0","0.8.10rc1","0.8.10rc2","0.8.1rc0","0.8.2","0.8.2rc0","0.8.2rc1","0.8.3","0.8.3rc0","0.8.4","0.8.4rc0","0.8.5","0.8.5rc0","0.8.6","0.8.6rc1","0.8.7","0.8.7rc0","0.8.8","0.8.8rc0","0.8.9","0.8.9rc0","0.9.0","0.9.0rc0","0.9.1","0.9.10","0.9.10.post0","0.9.11","0.9.11rc0","0.9.12","0.9.12rc0","0.9.12rc1","0.9.13","0.9.13rc0","0.9.14","0.9.14rc0","0.9.15","0.9.15rc0","0.9.16","0.9.16rc0","0.9.17","0.9.17rc0","0.9.18","0.9.18rc0","0.9.19","0.9.19rc0","0.9.1rc0","0.9.1rc1","0.9.2","0.9.20","0.9.20rc0","0.9.21","0.9.21rc0","0.9.22","0.9.22.post0","0.9.22rc0","0.9.22rc1","0.9.2rc0","0.9.3","0.9.3rc0","0.9.4","0.9.4rc0","0.9.5","0.9.5rc1","0.9.6","0.9.6rc0","0.9.7","0.9.7rc0","0.9.8","0.9.8rc0","0.9.9","0.9.9rc1","1.0.0","1.0.0rc2","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.1.0","1.1.1","1.1.10","1.1.11","1.1.12","1.1.13","1.1.14","1.1.15","1.1.16rc0","1.1.17","1.1.17rc0","1.1.18","1.1.19","1.1.2","1.1.20","1.1.21","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.10.0","1.10.1","1.10.10","1.10.11","1.10.11rc0","1.10.11rc1","1.10.12","1.10.13","1.10.14","1.10.15","1.10.2","1.10.3","1.10.4","1.10.5","1.10.6","1.10.6rc0","1.10.7","1.10.7rc0","1.10.8","1.10.9","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.3.0","1.3.1","1.3.10","1.3.11","1.3.12","1.3.13","1.3.14","1.3.14rc0","1.3.14rc1","1.3.14rc2","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.3.7","1.3.8","1.3.9","1.3.9rc0","1.4.0","1.4.1","1.4.10","1.4.11","1.4.12","1.4.12rc0","1.4.13","1.4.13rc0","1.4.13rc1","1.4.14","1.4.15","1.4.16","1.4.17","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7","1.4.8","1.4.9","1.5.0","1.5.1","1.5.10","1.5.11","1.5.12","1.5.13","1.5.14","1.5.14rc0","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.5.9","1.6.0","1.6.1","1.6.10","1.6.11","1.6.12","1.6.13","1.6.14","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.1","1.7.10","1.7.11","1.7.12","1.7.13","1.7.14","1.7.15","1.7.16","1.7.2","1.7.2rc1","1.7.2rc2","1.7.2rc3","1.7.2rc4","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.7.9rc0","1.8.0","1.8.1","1.8.10","1.8.11","1.8.12","1.8.13","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","1.8.7","1.8.8","1.8.9","1.9.0","1.9.1","1.9.10","1.9.11","1.9.12","1.9.13","1.9.2","1.9.3","1.9.4","1.9.4rc0","1.9.5","1.9.6","1.9.7","1.9.8","1.9.9"]}],"products":[{"vendor":"dagsterlabs","product":"dagster"}],"references":[{"url":"https://github.com/dagster-io/dagster","tags":["Product","package"]},{"url":"https://github.com/dagster-io/dagster/pull/30002","tags":["Exploit","Issue Tracking","Vendor Advisory","fix","web","report"]},{"url":"https://www.gecko.security/blog/cve-2025-51481","tags":["Exploit","Third Party Advisory","article","web","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-51481","tags":["advisory"]},{"url":"https://github.com/dagster-io/dagster/commit/3a3cec2b51577c4970e6fc4c199cda6418c09a9d","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/dagster-ge/PYSEC-2025-102.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-h7x8-jv97-fvvm","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/51xxx/CVE-2025-51481.json","tags":["advisory"]},{"url":"https://pypi.org/project/dagster","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-51481","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2025-07-22T00:00:00Z","modified":"2025-07-22T18:13:15.486Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:32:30.302289Z"}],"euvd":[{"id":"EUVD-2025-22342","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2025-07-22T00:00:00Z","modified":"2025-07-22T18:13:15Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:32:05.325431Z"}],"ghsa":[{"id":"GHSA-h7x8-jv97-fvvm","title":"Dagster Local File Inclusion vulnerability","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2025-07-22T18:30:42Z","modified":"2026-06-05T14:33:31Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:40:17.745826Z"}],"nvd":[{"id":"CVE-2025-51481","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2025-07-22T17:15:33.543Z","modified":"2026-06-17T09:35:37.773Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:11:19.382856Z"}],"osv":[{"id":"CVE-2025-51481","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2025-07-22T00:00:00Z","modified":"2026-10-28T02:30:57.88286696Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:50.45326Z"},{"id":"GHSA-h7x8-jv97-fvvm","title":"Dagster Local File Inclusion vulnerability","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2025-07-22T18:30:42Z","modified":"2026-07-07T17:56:30.018660907Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:48.920784Z"},{"id":"PYSEC-2025-102","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2025-07-22T17:15:33.543Z","modified":"2026-11-05T18:30:02.541950501Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-05T18:56:24.528438Z"},{"id":"PYSEC-2026-1286","title":"Dagster Local File Inclusion vulnerability","description":"Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebook_path field of ExternalNotebookData requests, bypassing the intended extension-based check.","status":"published","published":"2026-07-07T16:02:58.276937Z","modified":"2026-07-07T17:56:30.018660907Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"}]}}