{"status":"live","computedAt":"2026-08-10T13:30:44","before":{"date":"2026-08-09","count":23,"attested":[{"cve":"CVE-2025-27516","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:6ee8f156eddd69829d5753cb6b7f0f00b2acbf0a7833d545def2d8e93fae1ec6"},{"cve":"CVE-2024-56201","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:3a2170e67134b0f68e09872d7a13f8298f6554e70735cbc805944ade8ef1a2d9"},{"cve":"CVE-2024-22195","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:51740bcb0de4b4e59223213a25b82a1f827a7cbef19727b1ba9f568a04c1bd26"},{"cve":"CVE-2024-34064","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:6cff06eaa3bc591333ce01f7fb2233c18b40ed7a53c6f96b582119e6a691c3d1"},{"cve":"CVE-2024-56326","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:04322a1a222226742a7e2876e6fc0b19037f2dce5673f687eb771c7d9952b52c"},{"cve":"CVE-2020-14343","component":"pyyaml 5.3.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.2,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:ada96fe1177f9d1035fc8c7b6499eb1aa3e92c31d05d9c09359a77090a623aa5"},{"cve":"CVE-2024-39689","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:5c071aae2e0057124f1b3e8ed721fcc5c7cfd6dc5d83ac7c302362f477695516"},{"cve":"CVE-2022-23491","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:d8f9e39adeb716fdc053b463767060feb0897447f4dfce420b0c167a7329480a"},{"cve":"CVE-2023-37920","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:18712cc67b18e9a45d1b9eff8d2480308bf7ab5baa2fb651249e3aed6f8ba031"},{"cve":"CVE-2026-45409","component":"idna 2.10","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:fff888822ef52c8b06f1298c31046df27db0441296ee09d77128eecd1a83da63"},{"cve":"CVE-2024-3651","component":"idna 2.10","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:423876503b2f869413c30c81686079256da642d133a17ee7897f64337b717d7f"},{"cve":"CVE-2024-47081","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:d6b9f07cc41786e029bb05efd6df7d18029648a63af6622d668035126011c942"},{"cve":"CVE-2024-35195","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:7f9de58df158ad2b8b071cc749421cf6402f02ea40811a57522905e5f577e040"},{"cve":"CVE-2026-25645","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:8d34a0b1916c8c49e4c364b5faf1c86e71e93fa7f82ac8a276ac15ead05ebffa"},{"cve":"CVE-2023-32681","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.1,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:21cbf88f8073fa0d2a1e42dddf64743f24fad57b47c1e5b78a70dc73b56450cd"},{"cve":"CVE-2025-66471","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:316cd6e8c2305f9243d0f423fd239421c32364dfd775896c0bf100ad22532782"},{"cve":"CVE-2024-37891","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:2a1aaaecdd2ffa20fe2fd19d37ae31d7a445b879cfff4703ae793965fa38686b"},{"cve":"CVE-2026-21441","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.1,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:13ab6bc6be0d4be21767d0f61896d99497d3e4eb197d6812c80417b41f78f531"},{"cve":"CVE-2023-45803","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:8b1317baf5b8f1799334eea1e0550ce8da6afa23066438a625dbea1293a5e5ad"},{"cve":"CVE-2025-66418","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:1b25fa20d85ebd735f891360e9419753911cc848b465c1eddb5574fee552b7c8"},{"cve":"CVE-2025-50181","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:73e9853ad6f69008c2481669d9b756c95e071d2fa9f1bd974fa0fbf9dc796cc7"},{"cve":"CVE-2026-44431","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:4e26598bc77ae50e5492688d251f6d2b1dc83dd23d677fc039195b4b152248a3"},{"cve":"CVE-2023-43804","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","verdict":"not_affected","exposure":0.0,"issuedAt":"2026-08-09T14:30:26","deprecated":true,"downstreamCount":1,"sensitiveFieldCount":2,"evidenceDigest":"sha256:923025a1187c2557694e06427160c954c3c6398e1aff5cf59edab7de6c906f91"}],"vex":{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://blastradius/vex/2026-08-09T14:30:26.685149","author":"BLASTRADIUS","timestamp":"2026-08-09T14:30:26.685149","version":1,"statements":[{"@id":"https://blastradius/vex/statement/a8756653541dfbf7c3fe874cb9910d7f","vulnerability":{"name":"CVE-2025-27516","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-27516"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:6ee8f156eddd69829d5753cb6b7f0f00b2acbf0a7833d545def2d8e93fae1ec6","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-27516","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004970","fixed_version":"3.1.6"}},"_blastradius_attestation":"https://blastradius/vex/attestation/17564ee4ca8862ce86e5951d34871da4"},{"@id":"https://blastradius/vex/statement/185d9178a5750e27a4f42d6536f64a5e","vulnerability":{"name":"CVE-2024-56201","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:3a2170e67134b0f68e09872d7a13f8298f6554e70735cbc805944ade8ef1a2d9","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-56201","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003070","fixed_version":"3.1.5"}},"_blastradius_attestation":"https://blastradius/vex/attestation/59c40afd6eb8e553be139ae9213c9b9d"},{"@id":"https://blastradius/vex/statement/d4b7f1b5e2d0ad2be3220ff59c17482a","vulnerability":{"name":"CVE-2024-22195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:51740bcb0de4b4e59223213a25b82a1f827a7cbef19727b1ba9f568a04c1bd26","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-22195","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.008920","fixed_version":"3.1.3"}},"_blastradius_attestation":"https://blastradius/vex/attestation/b1d5e7faf41d773e9a8bb508d9b19aa4"},{"@id":"https://blastradius/vex/statement/7cd26dfc47f6426e36cd9626a64e6968","vulnerability":{"name":"CVE-2024-34064","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:6cff06eaa3bc591333ce01f7fb2233c18b40ed7a53c6f96b582119e6a691c3d1","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-34064","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.009790","fixed_version":"3.1.4"}},"_blastradius_attestation":"https://blastradius/vex/attestation/61da700cbd8353ffa98358d539376252"},{"@id":"https://blastradius/vex/statement/0d1b6c1b7c451c8bdfb95437de2f2306","vulnerability":{"name":"CVE-2024-56326","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:04322a1a222226742a7e2876e6fc0b19037f2dce5673f687eb771c7d9952b52c","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-56326","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005210","fixed_version":"3.1.5"}},"_blastradius_attestation":"https://blastradius/vex/attestation/541c8229f5fc5b86f0cb9440255458a7"},{"@id":"https://blastradius/vex/statement/e18f17349fbfce09a19d4a29a888b9a6","vulnerability":{"name":"CVE-2020-14343","@id":"https://nvd.nist.gov/vuln/detail/CVE-2020-14343"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/pyyaml@5.3.1"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:ada96fe1177f9d1035fc8c7b6499eb1aa3e92c31d05d9c09359a77090a623aa5","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2020-14343","purl":"pkg:pypi/pyyaml@5.3.1","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.059840","fixed_version":"5.4"}},"_blastradius_attestation":"https://blastradius/vex/attestation/ff024e7d6bb6652e959a3b03988e6832"},{"@id":"https://blastradius/vex/statement/081e35a0668fc3816012c0c99ea71c11","vulnerability":{"name":"CVE-2024-39689","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-39689"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:5c071aae2e0057124f1b3e8ed721fcc5c7cfd6dc5d83ac7c302362f477695516","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-39689","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.010490","fixed_version":"2024.7.4"}},"_blastradius_attestation":"https://blastradius/vex/attestation/c30bca172750ec1c5599d1b25e1dcf94"},{"@id":"https://blastradius/vex/statement/4dea6dd6b97591491b436ed626e940bd","vulnerability":{"name":"CVE-2022-23491","@id":"https://nvd.nist.gov/vuln/detail/CVE-2022-23491"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:d8f9e39adeb716fdc053b463767060feb0897447f4dfce420b0c167a7329480a","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2022-23491","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005350","fixed_version":"2022.12.07"}},"_blastradius_attestation":"https://blastradius/vex/attestation/530e51f8eca70ed6bd6274d22c23231e"},{"@id":"https://blastradius/vex/statement/34e58579a661cbbb4a7735849a69b90d","vulnerability":{"name":"CVE-2023-37920","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-37920"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:18712cc67b18e9a45d1b9eff8d2480308bf7ab5baa2fb651249e3aed6f8ba031","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-37920","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005630","fixed_version":"2023.7.22"}},"_blastradius_attestation":"https://blastradius/vex/attestation/dc3f25433d29a573d99a7648b60930b4"},{"@id":"https://blastradius/vex/statement/6866da55d2881df3f64c81e79c4efa33","vulnerability":{"name":"CVE-2026-45409","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:fff888822ef52c8b06f1298c31046df27db0441296ee09d77128eecd1a83da63","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-45409","purl":"pkg:pypi/idna@2.10","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"3.15"}},"_blastradius_attestation":"https://blastradius/vex/attestation/2bbfdc507c47ebf073eca8d6a585e306"},{"@id":"https://blastradius/vex/statement/4677feffaef7eef166d5923d89893231","vulnerability":{"name":"CVE-2024-3651","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-3651"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:423876503b2f869413c30c81686079256da642d133a17ee7897f64337b717d7f","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-3651","purl":"pkg:pypi/idna@2.10","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.013860","fixed_version":"3.7"}},"_blastradius_attestation":"https://blastradius/vex/attestation/25c72802f6e1cebeedead4f2537d3585"},{"@id":"https://blastradius/vex/statement/47499ab5ef1d4545a89e4b9c88d749ea","vulnerability":{"name":"CVE-2024-47081","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-47081"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:d6b9f07cc41786e029bb05efd6df7d18029648a63af6622d668035126011c942","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-47081","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.008450","fixed_version":"2.32.4"}},"_blastradius_attestation":"https://blastradius/vex/attestation/09203ddfae81589bd8dc735a385c57b7"},{"@id":"https://blastradius/vex/statement/c18d76d3c147b74212f67f27bb783957","vulnerability":{"name":"CVE-2024-35195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:7f9de58df158ad2b8b071cc749421cf6402f02ea40811a57522905e5f577e040","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-35195","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003400","fixed_version":"2.32.0"}},"_blastradius_attestation":"https://blastradius/vex/attestation/324625239d7a2fc40ba1687bf9e4bb5c"},{"@id":"https://blastradius/vex/statement/7928b565dff671b8bcd4d20f41c39b65","vulnerability":{"name":"CVE-2026-25645","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-25645"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:8d34a0b1916c8c49e4c364b5faf1c86e71e93fa7f82ac8a276ac15ead05ebffa","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-25645","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.001820","fixed_version":"2.33.0"}},"_blastradius_attestation":"https://blastradius/vex/attestation/480149411426251a7b123f5d61973489"},{"@id":"https://blastradius/vex/statement/76b2965ab34cf7194089b9d0d18a9ab6","vulnerability":{"name":"CVE-2023-32681","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-32681"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:21cbf88f8073fa0d2a1e42dddf64743f24fad57b47c1e5b78a70dc73b56450cd","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-32681","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.029740","fixed_version":"2.31.0"}},"_blastradius_attestation":"https://blastradius/vex/attestation/ff93cef8b2e80f55c275af7ffcee3e2e"},{"@id":"https://blastradius/vex/statement/f60bf14034adac3a3e7afb0b91099f30","vulnerability":{"name":"CVE-2025-66471","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:316cd6e8c2305f9243d0f423fd239421c32364dfd775896c0bf100ad22532782","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-66471","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}},"_blastradius_attestation":"https://blastradius/vex/attestation/5c41fc3e9d6ae4fbfe07b7aeddaf41e8"},{"@id":"https://blastradius/vex/statement/56b02c6f1dc80187ad6ab13a24d6cede","vulnerability":{"name":"CVE-2024-37891","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-37891"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:2a1aaaecdd2ffa20fe2fd19d37ae31d7a445b879cfff4703ae793965fa38686b","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-37891","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.011410","fixed_version":"1.26.19"}},"_blastradius_attestation":"https://blastradius/vex/attestation/0997f5348a4709dc7bb60c0569f4dd8f"},{"@id":"https://blastradius/vex/statement/af782ee9230da6f5de1dd2b1127f72dc","vulnerability":{"name":"CVE-2026-21441","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:13ab6bc6be0d4be21767d0f61896d99497d3e4eb197d6812c80417b41f78f531","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-21441","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.027140","fixed_version":"2.6.3"}},"_blastradius_attestation":"https://blastradius/vex/attestation/fd2a3002fc39015325b28e077bbceaa4"},{"@id":"https://blastradius/vex/statement/075fa1815a6b89baf9b32d94092e3285","vulnerability":{"name":"CVE-2023-45803","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:8b1317baf5b8f1799334eea1e0550ce8da6afa23066438a625dbea1293a5e5ad","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-45803","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005390","fixed_version":"2.0.7"}},"_blastradius_attestation":"https://blastradius/vex/attestation/9d1500dfd002fa469c4413dbe9d43163"},{"@id":"https://blastradius/vex/statement/ca5b716c528233c965a12d31eec8db4b","vulnerability":{"name":"CVE-2025-66418","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:1b25fa20d85ebd735f891360e9419753911cc848b465c1eddb5574fee552b7c8","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-66418","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}},"_blastradius_attestation":"https://blastradius/vex/attestation/3d2775edd54d2d1c429999813e27c194"},{"@id":"https://blastradius/vex/statement/1344c36e81602421ae214a0b93e51b30","vulnerability":{"name":"CVE-2025-50181","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:73e9853ad6f69008c2481669d9b756c95e071d2fa9f1bd974fa0fbf9dc796cc7","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-50181","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"2.5.0"}},"_blastradius_attestation":"https://blastradius/vex/attestation/e6de40888274a2e22331564da4bf0976"},{"@id":"https://blastradius/vex/statement/d260f19474bf75b9ebff214863a5b8c1","vulnerability":{"name":"CVE-2026-44431","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:4e26598bc77ae50e5492688d251f6d2b1dc83dd23d677fc039195b4b152248a3","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-44431","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003310","fixed_version":"2.7.0"}},"_blastradius_attestation":"https://blastradius/vex/attestation/d2379018592b0413fedee37f3ee8d6a2"},{"@id":"https://blastradius/vex/statement/cc5b05e8c82804c9de4c26d7b7e2d383","vulnerability":{"name":"CVE-2023-43804","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-43804"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","timestamp":"2026-08-09T14:30:26.685149","justification":"vulnerable_code_not_in_execute_path","_blastradius_witness":{"digest":"sha256:923025a1187c2557694e06427160c954c3c6398e1aff5cf59edab7de6c906f91","observed_at":"2026-08-09T14:30:26.685149","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-43804","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":"2026-08-09T02:14:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.012070","fixed_version":"2.0.6"}},"_blastradius_attestation":"https://blastradius/vex/attestation/e8ae614d59e2462b7f889532edce6da4"}]}},"whatChanged":["`deprecated` on legacy_export: True -> False"],"after":{"date":"2026-08-10","counts":{"urgent":23,"needsReview":0,"dismissed":23},"findings":[{"cve":"CVE-2020-14343","component":"pyyaml 5.3.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.05984,"exposure":55.6,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"5.4","evidenceDigest":"sha256:c58518bb003353cbca4ccd8cdf840f4f67c23715045cf729136bb1f9d5788a4a"},{"cve":"CVE-2023-32681","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.02974,"exposure":51.6,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.31.0","evidenceDigest":"sha256:d6ae766634f6b7a25c3e70d173f3e7b3bb195b3a97bcc2296b3630786a6c2cad"},{"cve":"CVE-2026-21441","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.02714,"exposure":50.8,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.6.3","evidenceDigest":"sha256:1263a56fa587c780fb6a36770f06fd3d9a54c2cdad57e7fdaff9f1aa16faa1e9"},{"cve":"CVE-2024-3651","component":"idna 2.10","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.01386,"exposure":41.8,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"3.7","evidenceDigest":"sha256:6adacda45d7016aca8f47aad9811f25077288c42391fc25711657a38f3c6ace9"},{"cve":"CVE-2023-43804","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.01207,"exposure":39.3,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.0.6","evidenceDigest":"sha256:a1073b6cae0239362798dcf31b1b7d9ac68a7fe00c99a2709925de42f0b46a9f"},{"cve":"CVE-2024-37891","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.01141,"exposure":38.2,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"1.26.19","evidenceDigest":"sha256:e5b732c279e94f4eca37a032aab39dd75afbe6bc9d1358b90a6e76e0ed2bef0c"},{"cve":"CVE-2024-39689","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.01049,"exposure":36.6,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2024.7.4","evidenceDigest":"sha256:1d60da12b46f506327fda3392bd2d6475d44e1e5a77ca049bdc2042f82bffc0e"},{"cve":"CVE-2024-34064","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00979,"exposure":35.3,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"3.1.4","evidenceDigest":"sha256:678295c3a2b1beb29a8ba314678f0b7eec3674ab2ccb280e665f2c685f376bb5"},{"cve":"CVE-2024-22195","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00892,"exposure":33.6,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"3.1.3","evidenceDigest":"sha256:d0b03adaa62fccc041652705c2fb8833b6f3012441bb057e0a0632fee216d388"},{"cve":"CVE-2024-47081","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00845,"exposure":32.7,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.32.4","evidenceDigest":"sha256:6926ff0986e21b444fb1e24a442a4ff3c7293b995eb74ea7095f347bacfd6390"},{"cve":"CVE-2025-66471","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00692,"exposure":29.7,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.6.0","evidenceDigest":"sha256:70d274b1d33343c14e2869e62a6ee49a81716bfa8e92ca5cc427affc89685bbc"},{"cve":"CVE-2025-66418","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00692,"exposure":29.7,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.6.0","evidenceDigest":"sha256:92e90b4be5f79a5c5da97ded6248a8fcf57b6d138b7452716d4221b09c918948"},{"cve":"CVE-2023-37920","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00563,"exposure":26.2,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2023.7.22","evidenceDigest":"sha256:3b90c32f8105891fb32f5ef313a5c264b862f72267eb6504b354b60942218db8"},{"cve":"CVE-2023-45803","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00539,"exposure":25.5,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.0.7","evidenceDigest":"sha256:041a52b5605e86c26bc439fdf8dca3af15416706106c2bb627f7e13b3c0922bf"},{"cve":"CVE-2022-23491","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00535,"exposure":25.3,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2022.12.07","evidenceDigest":"sha256:7016e814a8438455e6d8bb84a5bc4fc4807049ee3a336fdf5395997cc4766fa0"},{"cve":"CVE-2024-56326","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00521,"exposure":24.8,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"3.1.5","evidenceDigest":"sha256:49ea2d3ac46d1e1998e252d6d5dc318e208bf900d3d832907a8e6efb2e986682"},{"cve":"CVE-2025-27516","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00497,"exposure":24.0,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"3.1.6","evidenceDigest":"sha256:031108e893b927fa8b8611cfbe540ad98ef5adccb23048176012934f242b0d8b"},{"cve":"CVE-2026-45409","component":"idna 2.10","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00408,"exposure":20.2,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"3.15","evidenceDigest":"sha256:7a51e6d2b40fce9be0130319013241d4c34098790e925040657919e9486c8159"},{"cve":"CVE-2025-50181","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00408,"exposure":20.2,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.5.0","evidenceDigest":"sha256:10380656e280eb79477ef2bd46001ca74a4540b8c4d987081870643d43f9cfef"},{"cve":"CVE-2024-35195","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.0034,"exposure":16.0,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.32.0","evidenceDigest":"sha256:c2d2ba48403c0a500008cb25206926ac61bd18f10360cda68b00e4511495405d"},{"cve":"CVE-2026-44431","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00331,"exposure":15.4,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.7.0","evidenceDigest":"sha256:0e620275ddb645cdec87d41c876a57a05dfe721b9e36a3e94471c3b8c210518b"},{"cve":"CVE-2024-56201","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00307,"exposure":13.8,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"3.1.5","evidenceDigest":"sha256:698a787d2eb36fba5f89f537858bda01383490e54868a474977fdae8ce15f805"},{"cve":"CVE-2026-25645","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","activelyExploited":false,"attackProbability":0.00182,"exposure":4.8,"verdict":"affected","why":"live path to 1 downstream asset(s)","sensitiveColumns":["customer_report.first_name","customer_report.last_name"],"criticalConsumers":[],"fixedIn":"2.33.0","evidenceDigest":"sha256:88cb9a7299cb90cef53f752bb7f8fcb5902c629fe1ea8c900fe2968b609c8dab"},{"cve":"CVE-2020-14343","component":"pyyaml 5.3.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.05984,"exposure":0.9,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"5.4","evidenceDigest":"sha256:8f5316b9e27ba41d97014450d3356533e0dfb019292ce57886d5d013b3a5525f"},{"cve":"CVE-2023-32681","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.02974,"exposure":0.9,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.31.0","evidenceDigest":"sha256:18f1a20e17f1752852b2c7b3a1a32fb41aa03966e0f006952cc6bed56cfe3c36"},{"cve":"CVE-2026-21441","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.02714,"exposure":0.8,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.6.3","evidenceDigest":"sha256:e70f56faf3d406f545d7ab3184d9c9cf1fc44152dcc6459c76bb51c34c736178"},{"cve":"CVE-2024-3651","component":"idna 2.10","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.01386,"exposure":0.7,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"3.7","evidenceDigest":"sha256:ebf36c3bb8e9a5ccf6995115390102e20b4f9a362e78cad750db37802f7b797c"},{"cve":"CVE-2023-43804","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.01207,"exposure":0.7,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.0.6","evidenceDigest":"sha256:5d2273b745bf6b4cde3ef73aae4904b636cd6ec956e8d0c52fe729d9dc403fdd"},{"cve":"CVE-2024-22195","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00892,"exposure":0.6,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"3.1.3","evidenceDigest":"sha256:cd0cc7d56f978ebbdacad7225c4e391f71b5aaaacdd173ebfb4083e7a71ca8fe"},{"cve":"CVE-2024-34064","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00979,"exposure":0.6,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"3.1.4","evidenceDigest":"sha256:baf22df67eb551ae5a7a2962e4a630accfd94da63450630031a4f0dd5452fa5f"},{"cve":"CVE-2024-39689","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.01049,"exposure":0.6,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2024.7.4","evidenceDigest":"sha256:78bf0bfa30a23443e0f3847f49b8f9d44a4cda72fb7272bf47cfd57f60695334"},{"cve":"CVE-2024-37891","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.01141,"exposure":0.6,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"1.26.19","evidenceDigest":"sha256:5bc799d962ef6e187dbad7c31a15b5832378b718242152bf719cf6e58c251a17"},{"cve":"CVE-2024-47081","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00845,"exposure":0.5,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.32.4","evidenceDigest":"sha256:d5fc588b26251ba193dce1a4c7dfaec1d7d865fd3bf8ca2aedab4ae13d6eb6e7"},{"cve":"CVE-2025-66471","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00692,"exposure":0.5,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.6.0","evidenceDigest":"sha256:467202004d28a7c420d7b6fcd624d065fbb9754700c754fcb40201cd0055227f"},{"cve":"CVE-2025-66418","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00692,"exposure":0.5,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.6.0","evidenceDigest":"sha256:34187c449f8c866a2073a97e194be451d9f7682db09c04ed3364aafc50d27d54"},{"cve":"CVE-2025-27516","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00497,"exposure":0.4,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"3.1.6","evidenceDigest":"sha256:12d6b97746c9f87779a3289d301e42c988490bf04d5cf945e96f5bbec4fd90a5"},{"cve":"CVE-2024-56326","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00521,"exposure":0.4,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"3.1.5","evidenceDigest":"sha256:8f78897af0035dfa99d23b047f8219938596facd615fe1fd0710a0680f2b4a70"},{"cve":"CVE-2022-23491","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00535,"exposure":0.4,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2022.12.07","evidenceDigest":"sha256:8a75abc3d2704db776f5fd3b3ea673e97967ceaa013767e125c01ca298db1241"},{"cve":"CVE-2023-37920","component":"certifi 2021.10.8","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00563,"exposure":0.4,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2023.7.22","evidenceDigest":"sha256:ccafa44509bb41b181393a70060a23dfe395bd4e199103ff6cbf3d575078235f"},{"cve":"CVE-2023-45803","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00539,"exposure":0.4,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.0.7","evidenceDigest":"sha256:5069607234c97dbfe8e71c1687696e0c4a0c6633ecf68726ffa30edbfacbbe96"},{"cve":"CVE-2026-45409","component":"idna 2.10","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00408,"exposure":0.3,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"3.15","evidenceDigest":"sha256:214383fcf9203504c87c3be4b057c88adfb94592fff3e59cebc7981a9e5dfdbc"},{"cve":"CVE-2024-35195","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.0034,"exposure":0.3,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.32.0","evidenceDigest":"sha256:d87fd23e5f2ecde4c19ca0015f0cc5c0d74e2ea9c8169f69468fd39295443b89"},{"cve":"CVE-2025-50181","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00408,"exposure":0.3,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.5.0","evidenceDigest":"sha256:5fc0e4bb95024af4e0c27c49e50543a390106ad8da874e0378219429c0557b45"},{"cve":"CVE-2026-44431","component":"urllib3 1.26.5","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00331,"exposure":0.3,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.7.0","evidenceDigest":"sha256:34b75679dac23fde32da6cf43004873b0819c08c00dba114accee0952c1cab70"},{"cve":"CVE-2024-56201","component":"jinja2 3.0.3","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00307,"exposure":0.2,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"3.1.5","evidenceDigest":"sha256:01b2f53b1f993e920b9a82479ad35b3b7348c17595b1e2498bbf986ca5613969"},{"cve":"CVE-2026-25645","component":"requests 2.25.1","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","activelyExploited":false,"attackProbability":0.00182,"exposure":0.1,"verdict":"not_affected","why":"consuming asset is deprecated (explicit retirement)","sensitiveColumns":[],"criticalConsumers":[],"fixedIn":"2.33.0","evidenceDigest":"sha256:36e6f049920fd8c42f5043884df99fa60a5053b1eb2b44d7434af494739da829"}],"retracted":[{"cve":"CVE-2025-27516","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-56201","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-22195","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-34064","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-56326","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2020-14343","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-39689","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2022-23491","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2023-37920","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2026-45409","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-3651","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-47081","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-35195","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2026-25645","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2023-32681","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2025-66471","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2024-37891","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2026-21441","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2023-45803","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2025-66418","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2025-50181","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2026-44431","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]},{"cve":"CVE-2023-43804","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","state":"retracted","was":"not_affected","now":"affected","ageDays":0,"reason":"deprecated True -> False","whatMoved":[{"fact":"deprecated","change":"True -> False","direction":"invalidates_suppression"}]}],"drifted":[],"vex":{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://blastradius/vex/2026-08-10T13:30:18","author":"BLASTRADIUS","timestamp":"2026-08-10T13:30:18","version":2,"statements":[{"@id":"https://blastradius/vex/statement/a8756653541dfbf7c3fe874cb9910d7f","vulnerability":{"name":"CVE-2025-27516","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-27516"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.6.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":24.0,"epss_score":0.00497,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:031108e893b927fa8b8611cfbe540ad98ef5adccb23048176012934f242b0d8b","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-27516","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004970","fixed_version":"3.1.6"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/17564ee4ca8862ce86e5951d34871da4"},{"@id":"https://blastradius/vex/statement/185d9178a5750e27a4f42d6536f64a5e","vulnerability":{"name":"CVE-2024-56201","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.5.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":13.8,"epss_score":0.00307,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:698a787d2eb36fba5f89f537858bda01383490e54868a474977fdae8ce15f805","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-56201","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003070","fixed_version":"3.1.5"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/59c40afd6eb8e553be139ae9213c9b9d"},{"@id":"https://blastradius/vex/statement/d4b7f1b5e2d0ad2be3220ff59c17482a","vulnerability":{"name":"CVE-2024-22195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.3.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":33.6,"epss_score":0.00892,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:d0b03adaa62fccc041652705c2fb8833b6f3012441bb057e0a0632fee216d388","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-22195","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.008920","fixed_version":"3.1.3"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/b1d5e7faf41d773e9a8bb508d9b19aa4"},{"@id":"https://blastradius/vex/statement/7cd26dfc47f6426e36cd9626a64e6968","vulnerability":{"name":"CVE-2024-34064","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":35.3,"epss_score":0.00979,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:678295c3a2b1beb29a8ba314678f0b7eec3674ab2ccb280e665f2c685f376bb5","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-34064","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.009790","fixed_version":"3.1.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/61da700cbd8353ffa98358d539376252"},{"@id":"https://blastradius/vex/statement/0d1b6c1b7c451c8bdfb95437de2f2306","vulnerability":{"name":"CVE-2024-56326","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.5.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":24.8,"epss_score":0.00521,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:49ea2d3ac46d1e1998e252d6d5dc318e208bf900d3d832907a8e6efb2e986682","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-56326","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005210","fixed_version":"3.1.5"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/541c8229f5fc5b86f0cb9440255458a7"},{"@id":"https://blastradius/vex/statement/e18f17349fbfce09a19d4a29a888b9a6","vulnerability":{"name":"CVE-2020-14343","@id":"https://nvd.nist.gov/vuln/detail/CVE-2020-14343"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/pyyaml@5.3.1"}}],"status":"affected","action_statement":"Upgrade pyyaml to 5.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":55.6,"epss_score":0.05984,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:c58518bb003353cbca4ccd8cdf840f4f67c23715045cf729136bb1f9d5788a4a","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2020-14343","purl":"pkg:pypi/pyyaml@5.3.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.059840","fixed_version":"5.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/ff024e7d6bb6652e959a3b03988e6832"},{"@id":"https://blastradius/vex/statement/081e35a0668fc3816012c0c99ea71c11","vulnerability":{"name":"CVE-2024-39689","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-39689"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"affected","action_statement":"Upgrade certifi to 2024.7.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":36.6,"epss_score":0.01049,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:1d60da12b46f506327fda3392bd2d6475d44e1e5a77ca049bdc2042f82bffc0e","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-39689","purl":"pkg:pypi/certifi@2021.10.8","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.010490","fixed_version":"2024.7.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/c30bca172750ec1c5599d1b25e1dcf94"},{"@id":"https://blastradius/vex/statement/4dea6dd6b97591491b436ed626e940bd","vulnerability":{"name":"CVE-2022-23491","@id":"https://nvd.nist.gov/vuln/detail/CVE-2022-23491"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"affected","action_statement":"Upgrade certifi to 2022.12.07.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":25.3,"epss_score":0.00535,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:7016e814a8438455e6d8bb84a5bc4fc4807049ee3a336fdf5395997cc4766fa0","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2022-23491","purl":"pkg:pypi/certifi@2021.10.8","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005350","fixed_version":"2022.12.07"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/530e51f8eca70ed6bd6274d22c23231e"},{"@id":"https://blastradius/vex/statement/34e58579a661cbbb4a7735849a69b90d","vulnerability":{"name":"CVE-2023-37920","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-37920"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"affected","action_statement":"Upgrade certifi to 2023.7.22.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":26.2,"epss_score":0.00563,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:3b90c32f8105891fb32f5ef313a5c264b862f72267eb6504b354b60942218db8","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-37920","purl":"pkg:pypi/certifi@2021.10.8","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005630","fixed_version":"2023.7.22"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/dc3f25433d29a573d99a7648b60930b4"},{"@id":"https://blastradius/vex/statement/6866da55d2881df3f64c81e79c4efa33","vulnerability":{"name":"CVE-2026-45409","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"affected","action_statement":"Upgrade idna to 3.15.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":20.2,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:7a51e6d2b40fce9be0130319013241d4c34098790e925040657919e9486c8159","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-45409","purl":"pkg:pypi/idna@2.10","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"3.15"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/2bbfdc507c47ebf073eca8d6a585e306"},{"@id":"https://blastradius/vex/statement/4677feffaef7eef166d5923d89893231","vulnerability":{"name":"CVE-2024-3651","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-3651"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"affected","action_statement":"Upgrade idna to 3.7.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":41.8,"epss_score":0.01386,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:6adacda45d7016aca8f47aad9811f25077288c42391fc25711657a38f3c6ace9","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-3651","purl":"pkg:pypi/idna@2.10","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.013860","fixed_version":"3.7"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/25c72802f6e1cebeedead4f2537d3585"},{"@id":"https://blastradius/vex/statement/47499ab5ef1d4545a89e4b9c88d749ea","vulnerability":{"name":"CVE-2024-47081","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-47081"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.32.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":32.7,"epss_score":0.00845,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:6926ff0986e21b444fb1e24a442a4ff3c7293b995eb74ea7095f347bacfd6390","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-47081","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.008450","fixed_version":"2.32.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/09203ddfae81589bd8dc735a385c57b7"},{"@id":"https://blastradius/vex/statement/c18d76d3c147b74212f67f27bb783957","vulnerability":{"name":"CVE-2024-35195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.32.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":16.0,"epss_score":0.0034,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:c2d2ba48403c0a500008cb25206926ac61bd18f10360cda68b00e4511495405d","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-35195","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003400","fixed_version":"2.32.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/324625239d7a2fc40ba1687bf9e4bb5c"},{"@id":"https://blastradius/vex/statement/7928b565dff671b8bcd4d20f41c39b65","vulnerability":{"name":"CVE-2026-25645","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-25645"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.33.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":4.8,"epss_score":0.00182,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:88cb9a7299cb90cef53f752bb7f8fcb5902c629fe1ea8c900fe2968b609c8dab","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-25645","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.001820","fixed_version":"2.33.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/480149411426251a7b123f5d61973489"},{"@id":"https://blastradius/vex/statement/76b2965ab34cf7194089b9d0d18a9ab6","vulnerability":{"name":"CVE-2023-32681","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-32681"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.31.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":51.6,"epss_score":0.02974,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:d6ae766634f6b7a25c3e70d173f3e7b3bb195b3a97bcc2296b3630786a6c2cad","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-32681","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.029740","fixed_version":"2.31.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/ff93cef8b2e80f55c275af7ffcee3e2e"},{"@id":"https://blastradius/vex/statement/f60bf14034adac3a3e7afb0b91099f30","vulnerability":{"name":"CVE-2025-66471","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.6.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":29.7,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:70d274b1d33343c14e2869e62a6ee49a81716bfa8e92ca5cc427affc89685bbc","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-66471","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/5c41fc3e9d6ae4fbfe07b7aeddaf41e8"},{"@id":"https://blastradius/vex/statement/56b02c6f1dc80187ad6ab13a24d6cede","vulnerability":{"name":"CVE-2024-37891","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-37891"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 1.26.19.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":38.2,"epss_score":0.01141,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:e5b732c279e94f4eca37a032aab39dd75afbe6bc9d1358b90a6e76e0ed2bef0c","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-37891","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.011410","fixed_version":"1.26.19"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/0997f5348a4709dc7bb60c0569f4dd8f"},{"@id":"https://blastradius/vex/statement/af782ee9230da6f5de1dd2b1127f72dc","vulnerability":{"name":"CVE-2026-21441","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.6.3.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":50.8,"epss_score":0.02714,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:1263a56fa587c780fb6a36770f06fd3d9a54c2cdad57e7fdaff9f1aa16faa1e9","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-21441","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.027140","fixed_version":"2.6.3"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/fd2a3002fc39015325b28e077bbceaa4"},{"@id":"https://blastradius/vex/statement/075fa1815a6b89baf9b32d94092e3285","vulnerability":{"name":"CVE-2023-45803","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.0.7.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":25.5,"epss_score":0.00539,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:041a52b5605e86c26bc439fdf8dca3af15416706106c2bb627f7e13b3c0922bf","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-45803","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005390","fixed_version":"2.0.7"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/9d1500dfd002fa469c4413dbe9d43163"},{"@id":"https://blastradius/vex/statement/ca5b716c528233c965a12d31eec8db4b","vulnerability":{"name":"CVE-2025-66418","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.6.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":29.7,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:92e90b4be5f79a5c5da97ded6248a8fcf57b6d138b7452716d4221b09c918948","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-66418","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/3d2775edd54d2d1c429999813e27c194"},{"@id":"https://blastradius/vex/statement/1344c36e81602421ae214a0b93e51b30","vulnerability":{"name":"CVE-2025-50181","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.5.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":20.2,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:10380656e280eb79477ef2bd46001ca74a4540b8c4d987081870643d43f9cfef","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-50181","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"2.5.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/e6de40888274a2e22331564da4bf0976"},{"@id":"https://blastradius/vex/statement/d260f19474bf75b9ebff214863a5b8c1","vulnerability":{"name":"CVE-2026-44431","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.7.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":15.4,"epss_score":0.00331,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:0e620275ddb645cdec87d41c876a57a05dfe721b9e36a3e94471c3b8c210518b","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-44431","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003310","fixed_version":"2.7.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/d2379018592b0413fedee37f3ee8d6a2"},{"@id":"https://blastradius/vex/statement/cc5b05e8c82804c9de4c26d7b7e2d383","vulnerability":{"name":"CVE-2023-43804","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-43804"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.0.6.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":39.3,"epss_score":0.01207,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:a1073b6cae0239362798dcf31b1b7d9ac68a7fe00c99a2709925de42f0b46a9f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-43804","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.012070","fixed_version":"2.0.6"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/e8ae614d59e2462b7f889532edce6da4"},{"@id":"https://blastradius/vex/statement/138fe1845602573428726b3ae9a9a8ca","vulnerability":{"name":"CVE-2025-27516","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-27516"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00497,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:12d6b97746c9f87779a3289d301e42c988490bf04d5cf945e96f5bbec4fd90a5","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-27516","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.004970","fixed_version":"3.1.6"}}},{"@id":"https://blastradius/vex/statement/14f33660ff11db3942d95ee36e3e9a3f","vulnerability":{"name":"CVE-2024-56201","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.2,"epss_score":0.00307,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:01b2f53b1f993e920b9a82479ad35b3b7348c17595b1e2498bbf986ca5613969","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-56201","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.003070","fixed_version":"3.1.5"}}},{"@id":"https://blastradius/vex/statement/5628f908d54a5cc176ee438eab2008c5","vulnerability":{"name":"CVE-2024-22195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.00892,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:cd0cc7d56f978ebbdacad7225c4e391f71b5aaaacdd173ebfb4083e7a71ca8fe","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-22195","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.008920","fixed_version":"3.1.3"}}},{"@id":"https://blastradius/vex/statement/1923d124a74ad916ef86d500790b4fc1","vulnerability":{"name":"CVE-2024-34064","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.00979,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:baf22df67eb551ae5a7a2962e4a630accfd94da63450630031a4f0dd5452fa5f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-34064","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.009790","fixed_version":"3.1.4"}}},{"@id":"https://blastradius/vex/statement/db26d6f36e839d08665194de143d548a","vulnerability":{"name":"CVE-2024-56326","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00521,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:8f78897af0035dfa99d23b047f8219938596facd615fe1fd0710a0680f2b4a70","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-56326","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005210","fixed_version":"3.1.5"}}},{"@id":"https://blastradius/vex/statement/7334ebf21ccdceadc4f8bcc2d165f0e6","vulnerability":{"name":"CVE-2020-14343","@id":"https://nvd.nist.gov/vuln/detail/CVE-2020-14343"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/pyyaml@5.3.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.9,"epss_score":0.05984,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:8f5316b9e27ba41d97014450d3356533e0dfb019292ce57886d5d013b3a5525f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2020-14343","purl":"pkg:pypi/pyyaml@5.3.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.059840","fixed_version":"5.4"}}},{"@id":"https://blastradius/vex/statement/c2fbde8c221406a71e84c03fc2504804","vulnerability":{"name":"CVE-2024-39689","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-39689"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.01049,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:78bf0bfa30a23443e0f3847f49b8f9d44a4cda72fb7272bf47cfd57f60695334","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-39689","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.010490","fixed_version":"2024.7.4"}}},{"@id":"https://blastradius/vex/statement/a396d136dffcfb6ae2b1ec6e89d61687","vulnerability":{"name":"CVE-2022-23491","@id":"https://nvd.nist.gov/vuln/detail/CVE-2022-23491"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00535,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:8a75abc3d2704db776f5fd3b3ea673e97967ceaa013767e125c01ca298db1241","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2022-23491","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005350","fixed_version":"2022.12.07"}}},{"@id":"https://blastradius/vex/statement/d589f833f183e2a08604ba70a64f2b47","vulnerability":{"name":"CVE-2023-37920","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-37920"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00563,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:ccafa44509bb41b181393a70060a23dfe395bd4e199103ff6cbf3d575078235f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-37920","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005630","fixed_version":"2023.7.22"}}},{"@id":"https://blastradius/vex/statement/f95b0835b6d49b4e7d80b31589327e7d","vulnerability":{"name":"CVE-2026-45409","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:214383fcf9203504c87c3be4b057c88adfb94592fff3e59cebc7981a9e5dfdbc","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-45409","purl":"pkg:pypi/idna@2.10","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"3.15"}}},{"@id":"https://blastradius/vex/statement/5e2c41ac582a0ca40696ae9379fd221a","vulnerability":{"name":"CVE-2024-3651","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-3651"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.7,"epss_score":0.01386,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:ebf36c3bb8e9a5ccf6995115390102e20b4f9a362e78cad750db37802f7b797c","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-3651","purl":"pkg:pypi/idna@2.10","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.013860","fixed_version":"3.7"}}},{"@id":"https://blastradius/vex/statement/a9885951a6c9e1e13fa1fec591616f8a","vulnerability":{"name":"CVE-2024-47081","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-47081"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.5,"epss_score":0.00845,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:d5fc588b26251ba193dce1a4c7dfaec1d7d865fd3bf8ca2aedab4ae13d6eb6e7","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-47081","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.008450","fixed_version":"2.32.4"}}},{"@id":"https://blastradius/vex/statement/5a5ae973b1f75b06a8d422c104f57086","vulnerability":{"name":"CVE-2024-35195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.0034,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:d87fd23e5f2ecde4c19ca0015f0cc5c0d74e2ea9c8169f69468fd39295443b89","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-35195","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.003400","fixed_version":"2.32.0"}}},{"@id":"https://blastradius/vex/statement/f0babc0a1b0a45450939fd1c945bf564","vulnerability":{"name":"CVE-2026-25645","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-25645"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.1,"epss_score":0.00182,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:36e6f049920fd8c42f5043884df99fa60a5053b1eb2b44d7434af494739da829","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-25645","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.001820","fixed_version":"2.33.0"}}},{"@id":"https://blastradius/vex/statement/c14fedd1762f69f9c40dd33f774e94e1","vulnerability":{"name":"CVE-2023-32681","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-32681"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.9,"epss_score":0.02974,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:18f1a20e17f1752852b2c7b3a1a32fb41aa03966e0f006952cc6bed56cfe3c36","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-32681","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.029740","fixed_version":"2.31.0"}}},{"@id":"https://blastradius/vex/statement/33595209a940f814e8937bbf3e0cbaac","vulnerability":{"name":"CVE-2025-66471","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.5,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:467202004d28a7c420d7b6fcd624d065fbb9754700c754fcb40201cd0055227f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-66471","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}}},{"@id":"https://blastradius/vex/statement/c19e185de8ef936885b1cfd8841fc081","vulnerability":{"name":"CVE-2024-37891","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-37891"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.01141,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5bc799d962ef6e187dbad7c31a15b5832378b718242152bf719cf6e58c251a17","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-37891","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.011410","fixed_version":"1.26.19"}}},{"@id":"https://blastradius/vex/statement/3945a2caa62e02cab6f2ad9ca69bb4ed","vulnerability":{"name":"CVE-2026-21441","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.8,"epss_score":0.02714,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:e70f56faf3d406f545d7ab3184d9c9cf1fc44152dcc6459c76bb51c34c736178","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-21441","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.027140","fixed_version":"2.6.3"}}},{"@id":"https://blastradius/vex/statement/def5880ce13c184b5c3208c388d2c8da","vulnerability":{"name":"CVE-2023-45803","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00539,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5069607234c97dbfe8e71c1687696e0c4a0c6633ecf68726ffa30edbfacbbe96","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-45803","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005390","fixed_version":"2.0.7"}}},{"@id":"https://blastradius/vex/statement/6b02d4f9a5fedb1878b2d08546307c1f","vulnerability":{"name":"CVE-2025-66418","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.5,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:34187c449f8c866a2073a97e194be451d9f7682db09c04ed3364aafc50d27d54","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-66418","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}}},{"@id":"https://blastradius/vex/statement/4f7af3faef5943faa5940f72f8d9bae8","vulnerability":{"name":"CVE-2025-50181","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5fc0e4bb95024af4e0c27c49e50543a390106ad8da874e0378219429c0557b45","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-50181","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"2.5.0"}}},{"@id":"https://blastradius/vex/statement/8d8305bd0978b8f8f6f51a9411c56a7f","vulnerability":{"name":"CVE-2026-44431","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.00331,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:34b75679dac23fde32da6cf43004873b0819c08c00dba114accee0952c1cab70","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-44431","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.003310","fixed_version":"2.7.0"}}},{"@id":"https://blastradius/vex/statement/839c7a2356f46b79a85822e93e17d4e8","vulnerability":{"name":"CVE-2023-43804","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-43804"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.7,"epss_score":0.01207,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5d2273b745bf6b4cde3ef73aae4904b636cd6ec956e8d0c52fe729d9dc403fdd","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-43804","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.012070","fixed_version":"2.0.6"}}}]}},"datahubWrites":[{"kind":"structured_properties","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","payload":{"security.components":["pkg:pypi/certifi@2021.10.8","pkg:pypi/idna@2.10","pkg:pypi/jinja2@3.0.3","pkg:pypi/pyyaml@5.3.1","pkg:pypi/requests@2.25.1","pkg:pypi/urllib3@1.26.5"],"security.cveIds":["CVE-2020-14343","CVE-2022-23491","CVE-2023-32681","CVE-2023-37920","CVE-2023-43804","CVE-2023-45803","CVE-2024-22195","CVE-2024-34064","CVE-2024-35195","CVE-2024-3651","CVE-2024-37891","CVE-2024-39689","CVE-2024-47081","CVE-2024-56201","CVE-2024-56326","CVE-2025-27516","CVE-2025-50181","CVE-2025-66418","CVE-2025-66471","CVE-2026-21441","CVE-2026-25645","CVE-2026-44431","CVE-2026-45409"],"security.maxCvss":9.8,"security.epssScore":0.0598,"security.kevListed":"false","security.exposureScore":55.6,"security.vexStatus":"affected","security.lastScanned":"2026-08-10T13:30:18","security.attestationStatus":"retracted","security.attestationAgeDays":0,"security.attestationDigest":"sha256:c58518bb003353cbca4ccd8cdf840f4f67c23715045cf729136bb1f9d5788a4a"}},{"kind":"tag","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","payload":{"tag":"urn:li:tag:SecurityRisk","action":"add"}},{"kind":"tag","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","payload":{"tag":"urn:li:tag:StaleAttestation","action":"add"}},{"kind":"assertion_result","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","payload":{"assertionUrn":"urn:li:assertion:blastradius-kevfree-303b20cb9924c4ad49ce","assertionType":"blastradius.kev-free","description":"Asset is free of KEV-listed (actively exploited) CVEs","platformUrn":"urn:li:dataPlatform:blastradius","entityUrn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","result":"SUCCESS","timestamp":"2026-08-10T13:30:18","failing_cves":[]}},{"kind":"incident","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","payload":{"type":"CUSTOM","customType":"SECURITY_ATTESTATION_RETRACTED","title":"23 VEX suppressions retracted — deprecated: True -> False","description":"23 suppressions on urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export) no longer hold.\nThey were attested not_affected from 2026-08-09T14:30:26.685149.\n\nWhat moved:\n  - deprecated: True -> False [invalidates_suppression]\n\nRetracted (23):\n  - CVE-2020-14343 not_affected -> affected  supersedes https://blastradius/vex/attestation/ff024e7d6bb6652e959a3b03988e6832\n  - CVE-2022-23491 not_affected -> affected  supersedes https://blastradius/vex/attestation/530e51f8eca70ed6bd6274d22c23231e\n  - CVE-2023-32681 not_affected -> affected  supersedes https://blastradius/vex/attestation/ff93cef8b2e80f55c275af7ffcee3e2e\n  - CVE-2023-37920 not_affected -> affected  supersedes https://blastradius/vex/attestation/dc3f25433d29a573d99a7648b60930b4\n  - CVE-2023-43804 not_affected -> affected  supersedes https://blastradius/vex/attestation/e8ae614d59e2462b7f889532edce6da4\n  - CVE-2023-45803 not_affected -> affected  supersedes https://blastradius/vex/attestation/9d1500dfd002fa469c4413dbe9d43163\n  - CVE-2024-22195 not_affected -> affected  supersedes https://blastradius/vex/attestation/b1d5e7faf41d773e9a8bb508d9b19aa4\n  - CVE-2024-34064 not_affected -> affected  supersedes https://blastradius/vex/attestation/61da700cbd8353ffa98358d539376252\n  - CVE-2024-35195 not_affected -> affected  supersedes https://blastradius/vex/attestation/324625239d7a2fc40ba1687bf9e4bb5c\n  - CVE-2024-3651 not_affected -> affected  supersedes https://blastradius/vex/attestation/25c72802f6e1cebeedead4f2537d3585\n  - CVE-2024-37891 not_affected -> affected  supersedes https://blastradius/vex/attestation/0997f5348a4709dc7bb60c0569f4dd8f\n  - CVE-2024-39689 not_affected -> affected  supersedes https://blastradius/vex/attestation/c30bca172750ec1c5599d1b25e1dcf94\n  - CVE-2024-47081 not_affected -> affected  supersedes https://blastradius/vex/attestation/09203ddfae81589bd8dc735a385c57b7\n  - CVE-2024-56201 not_affected -> affected  supersedes https://blastradius/vex/attestation/59c40afd6eb8e553be139ae9213c9b9d\n  - CVE-2024-56326 not_affected -> affected  supersedes https://blastradius/vex/attestation/541c8229f5fc5b86f0cb9440255458a7\n  - CVE-2025-27516 not_affected -> affected  supersedes https://blastradius/vex/attestation/17564ee4ca8862ce86e5951d34871da4\n  - CVE-2025-50181 not_affected -> affected  supersedes https://blastradius/vex/attestation/e6de40888274a2e22331564da4bf0976\n  - CVE-2025-66418 not_affected -> affected  supersedes https://blastradius/vex/attestation/3d2775edd54d2d1c429999813e27c194\n  - CVE-2025-66471 not_affected -> affected  supersedes https://blastradius/vex/attestation/5c41fc3e9d6ae4fbfe07b7aeddaf41e8\n  - CVE-2026-21441 not_affected -> affected  supersedes https://blastradius/vex/attestation/fd2a3002fc39015325b28e077bbceaa4\n  - CVE-2026-25645 not_affected -> affected  supersedes https://blastradius/vex/attestation/480149411426251a7b123f5d61973489\n  - CVE-2026-44431 not_affected -> affected  supersedes https://blastradius/vex/attestation/d2379018592b0413fedee37f3ee8d6a2\n  - CVE-2026-45409 not_affected -> affected  supersedes https://blastradius/vex/attestation/2bbfdc507c47ebf073eca8d6a585e306","resourceUrn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","source":"BLASTRADIUS"}},{"kind":"structured_properties","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","payload":{"security.components":["pkg:pypi/certifi@2021.10.8","pkg:pypi/idna@2.10","pkg:pypi/jinja2@3.0.3","pkg:pypi/pyyaml@5.3.1","pkg:pypi/requests@2.25.1","pkg:pypi/urllib3@1.26.5"],"security.cveIds":["CVE-2020-14343","CVE-2022-23491","CVE-2023-32681","CVE-2023-37920","CVE-2023-43804","CVE-2023-45803","CVE-2024-22195","CVE-2024-34064","CVE-2024-35195","CVE-2024-3651","CVE-2024-37891","CVE-2024-39689","CVE-2024-47081","CVE-2024-56201","CVE-2024-56326","CVE-2025-27516","CVE-2025-50181","CVE-2025-66418","CVE-2025-66471","CVE-2026-21441","CVE-2026-25645","CVE-2026-44431","CVE-2026-45409"],"security.maxCvss":9.8,"security.epssScore":0.0598,"security.kevListed":"false","security.exposureScore":0.9,"security.vexStatus":"not_affected","security.lastScanned":"2026-08-10T13:30:18","security.attestationStatus":"none","security.attestationAgeDays":0,"security.attestationDigest":"sha256:8f5316b9e27ba41d97014450d3356533e0dfb019292ce57886d5d013b3a5525f"}},{"kind":"tag","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","payload":{"tag":"urn:li:tag:SecurityRisk","action":"remove"}},{"kind":"tag","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","payload":{"tag":"urn:li:tag:StaleAttestation","action":"remove"}},{"kind":"assertion_result","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","payload":{"assertionUrn":"urn:li:assertion:blastradius-kevfree-4bfa26542499f6390f7e","assertionType":"blastradius.kev-free","description":"Asset is free of KEV-listed (actively exploited) CVEs","platformUrn":"urn:li:dataPlatform:blastradius","entityUrn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","result":"SUCCESS","timestamp":"2026-08-10T13:30:18","failing_cves":[]}},{"kind":"structured_properties","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),stg_customers)","payload":{"security.components":[],"security.cveIds":[],"security.maxCvss":0.0,"security.epssScore":0.0,"security.kevListed":"false","security.exposureScore":0.0,"security.vexStatus":"not_affected","security.lastScanned":"2026-08-10T13:30:18"}},{"kind":"tag","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),stg_customers)","payload":{"tag":"urn:li:tag:SecurityRisk","action":"remove"}},{"kind":"tag","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),stg_customers)","payload":{"tag":"urn:li:tag:StaleAttestation","action":"remove"}},{"kind":"assertion_result","asset":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),stg_customers)","payload":{"assertionUrn":"urn:li:assertion:blastradius-kevfree-30a15ebec613a5cc62a1","assertionType":"blastradius.kev-free","description":"Asset is free of KEV-listed (actively exploited) CVEs","platformUrn":"urn:li:dataPlatform:blastradius","entityUrn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),stg_customers)","result":"SUCCESS","timestamp":"2026-08-10T13:30:18","failing_cves":[]}}]}