sqlfluff-templater-dbt (2.0.0a1) potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a1)

sqlfluff PYPI version 2.0.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0a1 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

sqlfluff-templater-dbt (3.0.0a1) potentially affected by CVE-2026-46373 via sqlfluff (3.0.0a1)

sqlfluff PYPI version 3.0.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.0.0a1 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

sqlfluff-templater-dataform (0.1.3), sqlfluff-templater-dbt (3.2.4) potentially affected by CVE-2026-46373 via sqlfluff (3.2.4)

sqlfluff PYPI version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.3 - sqlfluff-templater-dbt 3.2.4 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

sqlfluff-templater-dbt (2.0.1) potentially affected by CVE-2026-46373 via sqlfluff (2.0.1)

sqlfluff PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.1 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

collate-sqllineage (>=1.6.8, <=1.6.10), sqlfluff-templater-dbt (3.3.1) +2 more potentially affected by CVE-2026-46373 via sqlfluff (3.3.1)

sqlfluff PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.8, =1.6.10 - sqlfluff-templater-dbt 3.3.1 - sqllineage 1.5.4 - txt2sql 0.2.0 Source cves: CVE-2026-46373 Source advisory...

cumulus-library-kidney-transplant (>=0.2.0, <=0.3.0), dbt-exasol (>=1.10.0, <=1.10.1) +10 more potentially affected by CVE-2026-46373 via sqlfluff (3.5.0)

sqlfluff PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cumulus-library-kidney-transplant =0.2.0, =1.10.0, =0.9.0a0, =0.4.36, =0.1.2, =1.3.0, =0.10.0, =1.0.0, =0.1.0, =0.3.1 -...

sqlfluff-templater-dbt (2.3.3), sqllineage (1.4.8) potentially affected by CVE-2026-46373 via sqlfluff (2.3.3)

sqlfluff PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.3.3 - sqllineage 1.4.8 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

sqlfluff-templater-dbt (1.4.1) potentially affected by CVE-2026-46373 via sqlfluff (1.4.1)

sqlfluff PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.1 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

sqlfluff-templater-dbt (2.0.0) potentially affected by CVE-2026-46373 via sqlfluff (2.0.0)

sqlfluff PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

sqlfluff-templater-dbt (1.4.2) potentially affected by CVE-2026-46373 via sqlfluff (1.4.2)

sqlfluff PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.2 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

CVE-2026-46373

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any...

sqlfluff-templater-dbt (2.0.6) potentially affected by CVE-2026-46373 via sqlfluff (2.0.6)

sqlfluff PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.6 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.2.1) potentially affected by CVE-2026-46373 via sqlfluff (1.2.1)

sqlfluff PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.2.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.3.0) potentially affected by CVE-2026-46373 via sqlfluff (1.3.0)

sqlfluff PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.3.2) potentially affected by CVE-2026-46373 via sqlfluff (1.3.2)

sqlfluff PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dataform (0.1.2), sqlfluff-templater-dbt (3.2.3) potentially affected by CVE-2026-46373 via sqlfluff (3.2.3)

sqlfluff PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.2 - sqlfluff-templater-dbt 3.2.3 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.0.5) potentially affected by CVE-2026-46373 via sqlfluff (2.0.5)

sqlfluff PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.5 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (3.0.0a2) potentially affected by CVE-2026-46373 via sqlfluff (3.0.0a2)

sqlfluff PYPI version 3.0.0a2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.0.0a2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-plugin-sparksql-upgrade (>=0.1.3, <=0.1.4), sqlfluff-templater-dbt (2.3.2) potentially affected by CVE-2026-46373 via sqlfluff (2.3.2)

sqlfluff PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-plugin-sparksql-upgrade =0.1.3, =0.1.4 - sqlfluff-templater-dbt 2.3.2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-V...

sqlfluff-templater-dbt (2.0.0a3) potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a3)

sqlfluff PYPI version 2.0.0a3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0a3 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...