cdbt (>=0.4.14, <=0.4.26), sqlfluff-templater-dataform (0.1.5) +1 more potentially affected by CVE-2026-46374 via sqlfluff (3.3.0)

sqlfluff PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cdbt =0.4.14, =0.4.26 - sqlfluff-templater-dataform 0.1.5 - sqlfluff-templater-dbt 3.3.0 Source cves: CVE-2026-46374 Source advisory:...

collate-sqllineage (>=1.6.4, <=1.6.7), dbt-coves (>=1.1.1a1, <=1.1.1a6) +2 more potentially affected by CVE-2026-46374 via sqlfluff (3.1.1)

sqlfluff PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.4, =1.1.1a1, =1.1.1a6 - sqlfluff-templater-dataform 0.1.0 - sqlfluff-templater-dbt 3.1.1 Source cves: CVE-2026-46374...

cdbt (>=0.4.10, <=0.4.13), sqlfluff-templater-dataform (0.1.4) +1 more potentially affected by CVE-2026-46374 via sqlfluff (3.2.5)

sqlfluff PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cdbt =0.4.10, =0.4.13 - sqlfluff-templater-dataform 0.1.4 - sqlfluff-templater-dbt 3.2.5 Source cves: CVE-2026-46374 Source advisory:...

sqlfluff-templater-dataform (0.1.3), sqlfluff-templater-dbt (3.2.4) potentially affected by CVE-2026-46373 via sqlfluff (3.2.4)

sqlfluff PYPI version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.3 - sqlfluff-templater-dbt 3.2.4 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dataform (>=0.1.8, <=0.1.11), sqlfluff-templater-dbt (>=4.0.0a1, <=4.0.4) potentially affected by CVE-2026-46373 via sqlfluff (>=4.0.0a1, <=4.0.4)

sqlfluff PYPI version =4.0.0a1, =0.1.8, =4.0.0a1, =4.0.4 Source cves: CVE-2026-46373 Source advisory: SNYK:PYTHON-SQLFLUFF-16770154...

sqlfluff-templater-dataform (>=0.1.8, <=0.1.11), sqlfluff-templater-dbt (>=4.0.0a1, <=4.0.4) potentially affected by CVE-2026-46373 via sqlfluff (>=4.0.0a1, <=4.0.4)

sqlfluff PYPI version =4.0.0a1, =0.1.8, =4.0.0a1, =4.0.4 Source cves: CVE-2026-46373 Source advisory: GHSA-WMHF-FQC8-VXHH...

collate-sqllineage (>=1.6.4, <=1.6.7), dbt-coves (>=1.1.1a1, <=1.1.1a6) +2 more potentially affected by CVE-2026-46373 via sqlfluff (3.1.1)

sqlfluff PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.4, =1.1.1a1, =1.1.1a6 - sqlfluff-templater-dataform 0.1.0 - sqlfluff-templater-dbt 3.1.1 Source cves: CVE-2026-46373...

cdbt (>=0.4.10, <=0.4.13), sqlfluff-templater-dataform (0.1.4) +1 more potentially affected by CVE-2026-46373 via sqlfluff (3.2.5)

sqlfluff PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cdbt =0.4.10, =0.4.13 - sqlfluff-templater-dataform 0.1.4 - sqlfluff-templater-dbt 3.2.5 Source cves: CVE-2026-46373 Source advisory:...

cdbt (>=0.4.14, <=0.4.26), sqlfluff-templater-dataform (0.1.5) +1 more potentially affected by CVE-2026-46373 via sqlfluff (3.3.0)

sqlfluff PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cdbt =0.4.14, =0.4.26 - sqlfluff-templater-dataform 0.1.5 - sqlfluff-templater-dbt 3.3.0 Source cves: CVE-2026-46373 Source advisory:...

sqlfluff-templater-dataform (>=0.1.8, <=0.1.11), sqlfluff-templater-dbt (>=4.0.0a1, <=4.0.4) potentially affected by CVE-2026-46373 via sqlfluff (>=4.0.0a1, <=4.0.4)

sqlfluff PYPI version =4.0.0a1, =0.1.8, =4.0.0a1, =4.0.4 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

data-designer (>=0.1.0, <=0.2.1), sqlfluff-templater-dataform (0.1.1) +1 more potentially affected by CVE-2026-46373 via sqlfluff (3.2.0)

sqlfluff PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - data-designer =0.1.0, =0.2.1 - sqlfluff-templater-dataform 0.1.1 - sqlfluff-templater-dbt 3.2.0 Source cves: CVE-2026-46373 Source advisory:...

sqlfluff-templater-dataform (0.1.2), sqlfluff-templater-dbt (3.2.3) potentially affected by CVE-2026-46373 via sqlfluff (3.2.3)

sqlfluff PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.2 - sqlfluff-templater-dbt 3.2.3 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

data-designer (>=0.2.2, <=0.6.0), data-designer-engine (>=0.4.0rc1, <=0.6.0) +4 more potentially affected by CVE-2026-46373 via sqlfluff (3.4.0)

sqlfluff PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - data-designer =0.2.2, =0.4.0rc1, =0.4.27, =0.1.0, =0.2.0 - sqlfluff-templater-dataform 0.1.6 - sqlfluff-templater-dbt 3.4.0 Source cves:...

EUVD-2025-25690

Malicious code in bioql PyPI...

CVE-2025-9118

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

CVE-2025-9118

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

CVE-2025-9118 Dataform Path Traversal

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

CVE-2025-9118

CVE-2025-9118 is a path traversal vulnerability in the NPM package installation process of Google Cloud Dataform. The flaw allows a remote attacker to read and write files in other customers’ repositories via a maliciously crafted package.json. The CVE is rated CRITICAL (CVSS 4.0 base score 10.0)...

CVE-2025-9118

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

CVE-2025-9118 Dataform Path Traversal

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...