Loading
Dagster is an orchestration platform for the development, production, and observation of data assets.
Does not declare an LLM SDK itself, but depends on a package that does, 1 step away.
Advisories that name dagster as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| GHSA-mjw2-v2hm-wj34: Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations | High | <= 1.13.0 | 1.13.1 | 2026-04-18 |
Shortest path through the runtime dependencies of each latest release.
As declared in PyPI metadata for version 1.13.26. Optional extras are listed with their extra name.