{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://blastradius/vex/2026-08-10T13:30:18","author":"BLASTRADIUS","timestamp":"2026-08-10T13:30:18","version":2,"statements":[{"@id":"https://blastradius/vex/statement/a8756653541dfbf7c3fe874cb9910d7f","vulnerability":{"name":"CVE-2025-27516","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-27516"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.6.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":24.0,"epss_score":0.00497,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:031108e893b927fa8b8611cfbe540ad98ef5adccb23048176012934f242b0d8b","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-27516","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004970","fixed_version":"3.1.6"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/17564ee4ca8862ce86e5951d34871da4"},{"@id":"https://blastradius/vex/statement/185d9178a5750e27a4f42d6536f64a5e","vulnerability":{"name":"CVE-2024-56201","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.5.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":13.8,"epss_score":0.00307,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:698a787d2eb36fba5f89f537858bda01383490e54868a474977fdae8ce15f805","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-56201","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003070","fixed_version":"3.1.5"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/59c40afd6eb8e553be139ae9213c9b9d"},{"@id":"https://blastradius/vex/statement/d4b7f1b5e2d0ad2be3220ff59c17482a","vulnerability":{"name":"CVE-2024-22195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.3.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":33.6,"epss_score":0.00892,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:d0b03adaa62fccc041652705c2fb8833b6f3012441bb057e0a0632fee216d388","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-22195","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.008920","fixed_version":"3.1.3"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/b1d5e7faf41d773e9a8bb508d9b19aa4"},{"@id":"https://blastradius/vex/statement/7cd26dfc47f6426e36cd9626a64e6968","vulnerability":{"name":"CVE-2024-34064","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":35.3,"epss_score":0.00979,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:678295c3a2b1beb29a8ba314678f0b7eec3674ab2ccb280e665f2c685f376bb5","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-34064","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.009790","fixed_version":"3.1.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/61da700cbd8353ffa98358d539376252"},{"@id":"https://blastradius/vex/statement/0d1b6c1b7c451c8bdfb95437de2f2306","vulnerability":{"name":"CVE-2024-56326","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"affected","action_statement":"Upgrade jinja2 to 3.1.5.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":24.8,"epss_score":0.00521,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:49ea2d3ac46d1e1998e252d6d5dc318e208bf900d3d832907a8e6efb2e986682","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-56326","purl":"pkg:pypi/jinja2@3.0.3","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005210","fixed_version":"3.1.5"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/541c8229f5fc5b86f0cb9440255458a7"},{"@id":"https://blastradius/vex/statement/e18f17349fbfce09a19d4a29a888b9a6","vulnerability":{"name":"CVE-2020-14343","@id":"https://nvd.nist.gov/vuln/detail/CVE-2020-14343"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/pyyaml@5.3.1"}}],"status":"affected","action_statement":"Upgrade pyyaml to 5.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":55.6,"epss_score":0.05984,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:c58518bb003353cbca4ccd8cdf840f4f67c23715045cf729136bb1f9d5788a4a","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2020-14343","purl":"pkg:pypi/pyyaml@5.3.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.059840","fixed_version":"5.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/ff024e7d6bb6652e959a3b03988e6832"},{"@id":"https://blastradius/vex/statement/081e35a0668fc3816012c0c99ea71c11","vulnerability":{"name":"CVE-2024-39689","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-39689"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"affected","action_statement":"Upgrade certifi to 2024.7.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":36.6,"epss_score":0.01049,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:1d60da12b46f506327fda3392bd2d6475d44e1e5a77ca049bdc2042f82bffc0e","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-39689","purl":"pkg:pypi/certifi@2021.10.8","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.010490","fixed_version":"2024.7.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/c30bca172750ec1c5599d1b25e1dcf94"},{"@id":"https://blastradius/vex/statement/4dea6dd6b97591491b436ed626e940bd","vulnerability":{"name":"CVE-2022-23491","@id":"https://nvd.nist.gov/vuln/detail/CVE-2022-23491"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"affected","action_statement":"Upgrade certifi to 2022.12.07.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":25.3,"epss_score":0.00535,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:7016e814a8438455e6d8bb84a5bc4fc4807049ee3a336fdf5395997cc4766fa0","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2022-23491","purl":"pkg:pypi/certifi@2021.10.8","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005350","fixed_version":"2022.12.07"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/530e51f8eca70ed6bd6274d22c23231e"},{"@id":"https://blastradius/vex/statement/34e58579a661cbbb4a7735849a69b90d","vulnerability":{"name":"CVE-2023-37920","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-37920"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"affected","action_statement":"Upgrade certifi to 2023.7.22.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":26.2,"epss_score":0.00563,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:3b90c32f8105891fb32f5ef313a5c264b862f72267eb6504b354b60942218db8","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-37920","purl":"pkg:pypi/certifi@2021.10.8","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005630","fixed_version":"2023.7.22"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/dc3f25433d29a573d99a7648b60930b4"},{"@id":"https://blastradius/vex/statement/6866da55d2881df3f64c81e79c4efa33","vulnerability":{"name":"CVE-2026-45409","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"affected","action_statement":"Upgrade idna to 3.15.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":20.2,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:7a51e6d2b40fce9be0130319013241d4c34098790e925040657919e9486c8159","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-45409","purl":"pkg:pypi/idna@2.10","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"3.15"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/2bbfdc507c47ebf073eca8d6a585e306"},{"@id":"https://blastradius/vex/statement/4677feffaef7eef166d5923d89893231","vulnerability":{"name":"CVE-2024-3651","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-3651"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"affected","action_statement":"Upgrade idna to 3.7.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":41.8,"epss_score":0.01386,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:6adacda45d7016aca8f47aad9811f25077288c42391fc25711657a38f3c6ace9","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-3651","purl":"pkg:pypi/idna@2.10","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.013860","fixed_version":"3.7"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/25c72802f6e1cebeedead4f2537d3585"},{"@id":"https://blastradius/vex/statement/47499ab5ef1d4545a89e4b9c88d749ea","vulnerability":{"name":"CVE-2024-47081","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-47081"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.32.4.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":32.7,"epss_score":0.00845,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:6926ff0986e21b444fb1e24a442a4ff3c7293b995eb74ea7095f347bacfd6390","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-47081","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.008450","fixed_version":"2.32.4"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/09203ddfae81589bd8dc735a385c57b7"},{"@id":"https://blastradius/vex/statement/c18d76d3c147b74212f67f27bb783957","vulnerability":{"name":"CVE-2024-35195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.32.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":16.0,"epss_score":0.0034,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:c2d2ba48403c0a500008cb25206926ac61bd18f10360cda68b00e4511495405d","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-35195","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003400","fixed_version":"2.32.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/324625239d7a2fc40ba1687bf9e4bb5c"},{"@id":"https://blastradius/vex/statement/7928b565dff671b8bcd4d20f41c39b65","vulnerability":{"name":"CVE-2026-25645","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-25645"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.33.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":4.8,"epss_score":0.00182,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:88cb9a7299cb90cef53f752bb7f8fcb5902c629fe1ea8c900fe2968b609c8dab","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-25645","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.001820","fixed_version":"2.33.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/480149411426251a7b123f5d61973489"},{"@id":"https://blastradius/vex/statement/76b2965ab34cf7194089b9d0d18a9ab6","vulnerability":{"name":"CVE-2023-32681","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-32681"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"affected","action_statement":"Upgrade requests to 2.31.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":51.6,"epss_score":0.02974,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:d6ae766634f6b7a25c3e70d173f3e7b3bb195b3a97bcc2296b3630786a6c2cad","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-32681","purl":"pkg:pypi/requests@2.25.1","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.029740","fixed_version":"2.31.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/ff93cef8b2e80f55c275af7ffcee3e2e"},{"@id":"https://blastradius/vex/statement/f60bf14034adac3a3e7afb0b91099f30","vulnerability":{"name":"CVE-2025-66471","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.6.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":29.7,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:70d274b1d33343c14e2869e62a6ee49a81716bfa8e92ca5cc427affc89685bbc","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-66471","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/5c41fc3e9d6ae4fbfe07b7aeddaf41e8"},{"@id":"https://blastradius/vex/statement/56b02c6f1dc80187ad6ab13a24d6cede","vulnerability":{"name":"CVE-2024-37891","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-37891"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 1.26.19.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":38.2,"epss_score":0.01141,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:e5b732c279e94f4eca37a032aab39dd75afbe6bc9d1358b90a6e76e0ed2bef0c","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2024-37891","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.011410","fixed_version":"1.26.19"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/0997f5348a4709dc7bb60c0569f4dd8f"},{"@id":"https://blastradius/vex/statement/af782ee9230da6f5de1dd2b1127f72dc","vulnerability":{"name":"CVE-2026-21441","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.6.3.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":50.8,"epss_score":0.02714,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:1263a56fa587c780fb6a36770f06fd3d9a54c2cdad57e7fdaff9f1aa16faa1e9","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-21441","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.027140","fixed_version":"2.6.3"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/fd2a3002fc39015325b28e077bbceaa4"},{"@id":"https://blastradius/vex/statement/075fa1815a6b89baf9b32d94092e3285","vulnerability":{"name":"CVE-2023-45803","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.0.7.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":25.5,"epss_score":0.00539,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:041a52b5605e86c26bc439fdf8dca3af15416706106c2bb627f7e13b3c0922bf","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-45803","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.005390","fixed_version":"2.0.7"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/9d1500dfd002fa469c4413dbe9d43163"},{"@id":"https://blastradius/vex/statement/ca5b716c528233c965a12d31eec8db4b","vulnerability":{"name":"CVE-2025-66418","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.6.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":29.7,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:92e90b4be5f79a5c5da97ded6248a8fcf57b6d138b7452716d4221b09c918948","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-66418","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/3d2775edd54d2d1c429999813e27c194"},{"@id":"https://blastradius/vex/statement/1344c36e81602421ae214a0b93e51b30","vulnerability":{"name":"CVE-2025-50181","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.5.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":20.2,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:10380656e280eb79477ef2bd46001ca74a4540b8c4d987081870643d43f9cfef","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2025-50181","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"2.5.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/e6de40888274a2e22331564da4bf0976"},{"@id":"https://blastradius/vex/statement/d260f19474bf75b9ebff214863a5b8c1","vulnerability":{"name":"CVE-2026-44431","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.7.0.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":15.4,"epss_score":0.00331,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:0e620275ddb645cdec87d41c876a57a05dfe721b9e36a3e94471c3b8c210518b","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2026-44431","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.003310","fixed_version":"2.7.0"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/d2379018592b0413fedee37f3ee8d6a2"},{"@id":"https://blastradius/vex/statement/cc5b05e8c82804c9de4c26d7b7e2d383","vulnerability":{"name":"CVE-2023-43804","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-43804"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"affected","action_statement":"Upgrade urllib3 to 2.0.6.","_blastradius_evidence":{"reachability":"reachable","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"last_run":"2026-08-08T20:44:05.047000","deprecated":false,"downstream_count":1,"exposure_score":39.3,"epss_score":0.01207,"kev_listed":false,"pii_fields_reached":["customer_report.first_name","customer_report.last_name"]},"_blastradius_witness":{"digest":"sha256:a1073b6cae0239362798dcf31b1b7d9ac68a7fe00c99a2709925de42f0b46a9f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),legacy_export)","cve_id":"CVE-2023-43804","purl":"pkg:pypi/urllib3@1.26.5","deprecated":false,"last_run":"2026-08-08T20:44:05.047000+00:00","downstream_urns":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)"],"critical_consumers":[],"sensitive_fields":["urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#first_name","urn:li:dataset:(urn:li:dataPlatform:file,jaffle_shop.reports.customer_report,PROD)#last_name"],"owners":[],"kev_listed":false,"epss_score":"0.012070","fixed_version":"2.0.6"}},"last_updated":"2026-08-10T13:30:18","_blastradius_supersedes":"https://blastradius/vex/attestation/e8ae614d59e2462b7f889532edce6da4"},{"@id":"https://blastradius/vex/statement/138fe1845602573428726b3ae9a9a8ca","vulnerability":{"name":"CVE-2025-27516","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-27516"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00497,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:12d6b97746c9f87779a3289d301e42c988490bf04d5cf945e96f5bbec4fd90a5","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-27516","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.004970","fixed_version":"3.1.6"}}},{"@id":"https://blastradius/vex/statement/14f33660ff11db3942d95ee36e3e9a3f","vulnerability":{"name":"CVE-2024-56201","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.2,"epss_score":0.00307,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:01b2f53b1f993e920b9a82479ad35b3b7348c17595b1e2498bbf986ca5613969","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-56201","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.003070","fixed_version":"3.1.5"}}},{"@id":"https://blastradius/vex/statement/5628f908d54a5cc176ee438eab2008c5","vulnerability":{"name":"CVE-2024-22195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.00892,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:cd0cc7d56f978ebbdacad7225c4e391f71b5aaaacdd173ebfb4083e7a71ca8fe","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-22195","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.008920","fixed_version":"3.1.3"}}},{"@id":"https://blastradius/vex/statement/1923d124a74ad916ef86d500790b4fc1","vulnerability":{"name":"CVE-2024-34064","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.00979,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:baf22df67eb551ae5a7a2962e4a630accfd94da63450630031a4f0dd5452fa5f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-34064","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.009790","fixed_version":"3.1.4"}}},{"@id":"https://blastradius/vex/statement/db26d6f36e839d08665194de143d548a","vulnerability":{"name":"CVE-2024-56326","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/jinja2@3.0.3"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00521,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:8f78897af0035dfa99d23b047f8219938596facd615fe1fd0710a0680f2b4a70","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-56326","purl":"pkg:pypi/jinja2@3.0.3","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005210","fixed_version":"3.1.5"}}},{"@id":"https://blastradius/vex/statement/7334ebf21ccdceadc4f8bcc2d165f0e6","vulnerability":{"name":"CVE-2020-14343","@id":"https://nvd.nist.gov/vuln/detail/CVE-2020-14343"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/pyyaml@5.3.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.9,"epss_score":0.05984,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:8f5316b9e27ba41d97014450d3356533e0dfb019292ce57886d5d013b3a5525f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2020-14343","purl":"pkg:pypi/pyyaml@5.3.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.059840","fixed_version":"5.4"}}},{"@id":"https://blastradius/vex/statement/c2fbde8c221406a71e84c03fc2504804","vulnerability":{"name":"CVE-2024-39689","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-39689"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.01049,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:78bf0bfa30a23443e0f3847f49b8f9d44a4cda72fb7272bf47cfd57f60695334","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-39689","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.010490","fixed_version":"2024.7.4"}}},{"@id":"https://blastradius/vex/statement/a396d136dffcfb6ae2b1ec6e89d61687","vulnerability":{"name":"CVE-2022-23491","@id":"https://nvd.nist.gov/vuln/detail/CVE-2022-23491"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00535,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:8a75abc3d2704db776f5fd3b3ea673e97967ceaa013767e125c01ca298db1241","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2022-23491","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005350","fixed_version":"2022.12.07"}}},{"@id":"https://blastradius/vex/statement/d589f833f183e2a08604ba70a64f2b47","vulnerability":{"name":"CVE-2023-37920","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-37920"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/certifi@2021.10.8"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00563,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:ccafa44509bb41b181393a70060a23dfe395bd4e199103ff6cbf3d575078235f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-37920","purl":"pkg:pypi/certifi@2021.10.8","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005630","fixed_version":"2023.7.22"}}},{"@id":"https://blastradius/vex/statement/f95b0835b6d49b4e7d80b31589327e7d","vulnerability":{"name":"CVE-2026-45409","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:214383fcf9203504c87c3be4b057c88adfb94592fff3e59cebc7981a9e5dfdbc","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-45409","purl":"pkg:pypi/idna@2.10","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"3.15"}}},{"@id":"https://blastradius/vex/statement/5e2c41ac582a0ca40696ae9379fd221a","vulnerability":{"name":"CVE-2024-3651","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-3651"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/idna@2.10"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.7,"epss_score":0.01386,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:ebf36c3bb8e9a5ccf6995115390102e20b4f9a362e78cad750db37802f7b797c","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-3651","purl":"pkg:pypi/idna@2.10","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.013860","fixed_version":"3.7"}}},{"@id":"https://blastradius/vex/statement/a9885951a6c9e1e13fa1fec591616f8a","vulnerability":{"name":"CVE-2024-47081","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-47081"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.5,"epss_score":0.00845,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:d5fc588b26251ba193dce1a4c7dfaec1d7d865fd3bf8ca2aedab4ae13d6eb6e7","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-47081","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.008450","fixed_version":"2.32.4"}}},{"@id":"https://blastradius/vex/statement/5a5ae973b1f75b06a8d422c104f57086","vulnerability":{"name":"CVE-2024-35195","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.0034,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:d87fd23e5f2ecde4c19ca0015f0cc5c0d74e2ea9c8169f69468fd39295443b89","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-35195","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.003400","fixed_version":"2.32.0"}}},{"@id":"https://blastradius/vex/statement/f0babc0a1b0a45450939fd1c945bf564","vulnerability":{"name":"CVE-2026-25645","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-25645"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.1,"epss_score":0.00182,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:36e6f049920fd8c42f5043884df99fa60a5053b1eb2b44d7434af494739da829","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-25645","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.001820","fixed_version":"2.33.0"}}},{"@id":"https://blastradius/vex/statement/c14fedd1762f69f9c40dd33f774e94e1","vulnerability":{"name":"CVE-2023-32681","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-32681"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/requests@2.25.1"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.9,"epss_score":0.02974,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:18f1a20e17f1752852b2c7b3a1a32fb41aa03966e0f006952cc6bed56cfe3c36","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-32681","purl":"pkg:pypi/requests@2.25.1","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.029740","fixed_version":"2.31.0"}}},{"@id":"https://blastradius/vex/statement/33595209a940f814e8937bbf3e0cbaac","vulnerability":{"name":"CVE-2025-66471","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.5,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:467202004d28a7c420d7b6fcd624d065fbb9754700c754fcb40201cd0055227f","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-66471","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}}},{"@id":"https://blastradius/vex/statement/c19e185de8ef936885b1cfd8841fc081","vulnerability":{"name":"CVE-2024-37891","@id":"https://nvd.nist.gov/vuln/detail/CVE-2024-37891"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.6,"epss_score":0.01141,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5bc799d962ef6e187dbad7c31a15b5832378b718242152bf719cf6e58c251a17","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2024-37891","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.011410","fixed_version":"1.26.19"}}},{"@id":"https://blastradius/vex/statement/3945a2caa62e02cab6f2ad9ca69bb4ed","vulnerability":{"name":"CVE-2026-21441","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.8,"epss_score":0.02714,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:e70f56faf3d406f545d7ab3184d9c9cf1fc44152dcc6459c76bb51c34c736178","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-21441","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.027140","fixed_version":"2.6.3"}}},{"@id":"https://blastradius/vex/statement/def5880ce13c184b5c3208c388d2c8da","vulnerability":{"name":"CVE-2023-45803","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.4,"epss_score":0.00539,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5069607234c97dbfe8e71c1687696e0c4a0c6633ecf68726ffa30edbfacbbe96","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-45803","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.005390","fixed_version":"2.0.7"}}},{"@id":"https://blastradius/vex/statement/6b02d4f9a5fedb1878b2d08546307c1f","vulnerability":{"name":"CVE-2025-66418","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.5,"epss_score":0.00692,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:34187c449f8c866a2073a97e194be451d9f7682db09c04ed3364aafc50d27d54","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-66418","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.006920","fixed_version":"2.6.0"}}},{"@id":"https://blastradius/vex/statement/4f7af3faef5943faa5940f72f8d9bae8","vulnerability":{"name":"CVE-2025-50181","@id":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.00408,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5fc0e4bb95024af4e0c27c49e50543a390106ad8da874e0378219429c0557b45","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2025-50181","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.004080","fixed_version":"2.5.0"}}},{"@id":"https://blastradius/vex/statement/8d8305bd0978b8f8f6f51a9411c56a7f","vulnerability":{"name":"CVE-2026-44431","@id":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.3,"epss_score":0.00331,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:34b75679dac23fde32da6cf43004873b0819c08c00dba114accee0952c1cab70","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2026-44431","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.003310","fixed_version":"2.7.0"}}},{"@id":"https://blastradius/vex/statement/839c7a2356f46b79a85822e93e17d4e8","vulnerability":{"name":"CVE-2023-43804","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-43804"},"products":[{"@id":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","identifiers":{"purl":"pkg:pypi/urllib3@1.26.5"}}],"status":"not_affected","justification":"vulnerable_code_not_in_execute_path","impact_statement":"No live downstream data consumers via lineage: consuming asset is deprecated (explicit retirement).","_blastradius_evidence":{"reachability":"not_in_execute_path","lineage_path":["urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)"],"last_run":null,"deprecated":true,"downstream_count":0,"exposure_score":0.7,"epss_score":0.01207,"kev_listed":false,"pii_fields_reached":[]},"_blastradius_witness":{"digest":"sha256:5d2273b745bf6b4cde3ef73aae4904b636cd6ec956e8d0c52fe729d9dc403fdd","observed_at":"2026-08-10T13:30:18.176185","facts":{"schema_version":1,"asset_urn":"urn:li:dataJob:(urn:li:dataFlow:(dbt,jaffle_shop,PROD),archive_export_2019)","cve_id":"CVE-2023-43804","purl":"pkg:pypi/urllib3@1.26.5","deprecated":true,"last_run":null,"downstream_urns":[],"critical_consumers":[],"sensitive_fields":[],"owners":[],"kev_listed":false,"epss_score":"0.012070","fixed_version":"2.0.6"}}}]}