{"id":"CGA-rmvp-x2mg-h978","modified":"2026-09-07T01:50:14.052059472Z","published":"2026-03-06T13:44:15Z","upstream":["CVE-2026-29790","GHSA-w75w-9qv4-j5xj"],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29790.json"},{"type":"ADVISORY","url":"https://github.com/dbt-labs/dbt-common/security/advisories/GHSA-w75w-9qv4-j5xj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29790"},{"type":"FIX","url":"https://github.com/dbt-labs/dbt-common/commit/e547954a48bac9394ef6eb98432e429dce9a7709"},{"type":"FIX","url":"https://github.com/pypa/pip/pull/13777"}],"affected":[{"package":{"name":"dbt-snowflake","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dbt-snowflake?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r2"}]}],"ecosystem_specific":{"components":[{"latest_event_timestamp":"2026-06-08T16:39:12Z","component_name":"dbt-common","component_version":"1.37.2","component_type":"python","component_location":"/opt/chainguard/dbt-snowflake/lib/python3.12/site-packages/dbt_common-1.37.2.dist-info/METADATA","component_purl":"pkg:pypi/dbt-common@1.37.2","latest_event_status":"fixed"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmvp-x2mg-h978.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"}]}