sqlfluff-templater-dbt (1.3.2) potentially affected by CVE-2026-46373 via sqlfluff (1.3.2)

sqlfluff PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.2.1) potentially affected by CVE-2026-46373 via sqlfluff (2.2.1)

sqlfluff PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.2.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (3.0.0a2) potentially affected by CVE-2026-46373 via sqlfluff (3.0.0a2)

sqlfluff PYPI version 3.0.0a2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.0.0a2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

alvin-cli (>=1.1.9, <=1.2.0), sqlfluff-templater-dbt (2.1.1) potentially affected by CVE-2026-46373 via sqlfluff (2.1.1)

sqlfluff PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =1.1.9, =1.2.0 - sqlfluff-templater-dbt 2.1.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (3.4.2) potentially affected by CVE-2026-46373 via sqlfluff (3.4.2)

sqlfluff PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.4.2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

cumulus-library (>=0.1.2, <=1.4.0), cumulus-library-covid (>=0.1.2, <=0.2.2) +3 more potentially affected by CVE-2026-46373 via sqlfluff (2.0.2)

sqlfluff PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cumulus-library =0.1.2, =0.1.2, =0.13.3.1, =1.0.3, =1.1.0.1 - sqlfluff-templater-dbt 2.0.2 Source cves: CVE-2026-46373 Source advisory:...

sqlfluff-templater-dataform (>=0.1.8, <=0.1.11), sqlfluff-templater-dbt (>=4.0.0a1, <=4.0.4) potentially affected by CVE-2026-46373 via sqlfluff (>=4.0.0a1, <=4.0.4)

sqlfluff PYPI version =4.0.0a1, =0.1.8, =4.0.0a1, =4.0.4 Source cves: CVE-2026-46373 Source advisory: SNYK:PYTHON-SQLFLUFF-16770154...

sqlfluff-templater-dbt (2.0.0a1) potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a1)

sqlfluff PYPI version 2.0.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0a1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

spear-ai-sqlfluff-config (>=2.0.1, <=2.0.2), sqlfluff-templater-dbt (3.0.6) potentially affected by CVE-2026-46373 via sqlfluff (3.0.6)

sqlfluff PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - spear-ai-sqlfluff-config =2.0.1, =2.0.2 - sqlfluff-templater-dbt 3.0.6 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (3.2.1) potentially affected by CVE-2026-46373 via sqlfluff (3.2.1)

sqlfluff PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.2.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.4.2) potentially affected by CVE-2026-46373 via sqlfluff (1.4.2)

sqlfluff PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.2.1) potentially affected by CVE-2026-46373 via sqlfluff (1.2.1)

sqlfluff PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.2.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.1.0), tableau-sql-parser (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-46373 via sqlfluff (2.1.0)

sqlfluff PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.1.0 - tableau-sql-parser =0.1.0, =0.1.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

SQLFluff: Recursive Stack Overflow in Parser

Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any application using the parser to trigger a Denial of Service through resource exhaustion. Patches Versions 4.1.0 and up contain ...

sqlfluff-templater-dbt (2.1.3) potentially affected by CVE-2026-46373 via sqlfluff (2.1.3)

sqlfluff PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.1.3 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

panther-analysis-tool (>=1.0.0, <=1.2.1), sqlfluff-templater-dbt (2.3.1) potentially affected by CVE-2026-46373 via sqlfluff (2.3.1)

sqlfluff PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - panther-analysis-tool =1.0.0, =1.2.1 - sqlfluff-templater-dbt 2.3.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.0.0a4) potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a4)

sqlfluff PYPI version 2.0.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0a4 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.0.0a2) potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a2)

sqlfluff PYPI version 2.0.0a2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0a2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.0.0a5) potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a5)

sqlfluff PYPI version 2.0.0a5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0a5 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.0.7) potentially affected by CVE-2026-46373 via sqlfluff (2.0.7)

sqlfluff PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.7 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...