Data-Pipeline — PoC Archivehttps://poc.intelseclab.com/tags/data-pipeline/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Dagster Database I/O Manager SQL Injection via Dynamic Partition Keys (CVE-2026-41490)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41490-dagster-partition-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41490-dagster-partition-sqli/High severity — web · CVE-2026-41490 (GHSA-mjw2-v2hm-wj34). Status: PoC. Affects: Dagster database I/O manager integrations: dagster-duckdb, dagster-snowflake, dagster-gcp (BigQuery), dagster-deltalake, dagster-snowflake-polars. Tags: dagster, sql-injection, graphql, duckdb, snowflake, bigquery, data-pipeline, dynamic-partitions.webHighdagstersql-injectiongraphqlduckdbsnowflakebigquerydata-pipelinedynamic-partitionsApache Parquet Java Unsafe Deserialization RCE (CVE-2025-30065)https://poc.intelseclab.com/pocs/misc/2026-05-16_apache-parquet-unsafe-deserialization-rce/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-05-16_apache-parquet-unsafe-deserialization-rce/Critical severity (CVSS 10) — misc · CVE-2025-30065. Status: Weaponized. Affects: Apache Parquet Java (parquet-avro) schema parsing consumers. Tags: RCE, unsafe-deserialization, parquet-avro, avro-schema, Java, JVM, SSRF, data-pipeline.miscCriticalRCEunsafe-deserializationparquet-avroavro-schemaJavaJVMSSRFdata-pipeline