# dbt Core v1.11.14 — dbt-core v1.11.14

- Product: dbt Core (https://whatsnew.fyi/product/dbt-core)
- Vendor: dbt Labs
- Date: 2026-08-20
- Version: v1.11.14
- Original notes: https://github.com/dbt-labs/dbt-core/releases/tag/v1.11.14
- Permalink: https://whatsnew.fyi/product/dbt-core/releases/v1.11.14

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Require sqlparse>=0.5.5,<0.7.0 to fix CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 (parser denial-of-service)

##### dbt-core 1.11.14 - August 20, 2026

###### Dependencies

- Require `sqlparse>=0.5.5,<0.7.0`, `sqlparse` 0.6.0 is the fixed release for CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 (parser denial-of-service). ([#15988](https://github.com/dbt-labs/dbt-core/issues/15988))

###### Contributors
- [@ulixius9](https://github.com/ulixius9) ([#15988](https://github.com/dbt-labs/dbt-core/issues/15988))