collate-sqllineage (>=1.1.5, <=1.2.4), openmetadata-ingestion (>=1.0.0.0, <=1.0.1.3) +3 more potentially affected by CVE-2026-46374 via sqlfluff (2.1.4)

sqlfluff PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.1.5, =1.0.0.0, =1.0.1.3 - openmetadata-sqllineage 1.1.2.0 - sqlfluff-templater-dbt 2.1.4 - sqllineage 1.4.7 Source cves:...

sqlfluff-templater-dbt (2.2.0) potentially affected by CVE-2026-46374 via sqlfluff (2.2.0)

sqlfluff PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.2.0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (2.2.1) potentially affected by CVE-2026-46374 via sqlfluff (2.2.1)

sqlfluff PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.2.1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (2.3.0) potentially affected by CVE-2026-46374 via sqlfluff (2.3.0)

sqlfluff PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.3.0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

cdbt (>=0.4.10, <=0.4.13), sqlfluff-templater-dataform (0.1.4) +1 more potentially affected by CVE-2026-46374 via sqlfluff (3.2.5)

sqlfluff PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cdbt =0.4.10, =0.4.13 - sqlfluff-templater-dataform 0.1.4 - sqlfluff-templater-dbt 3.2.5 Source cves: CVE-2026-46374 Source advisory:...

collate-sqllineage (>=1.6.8, <=1.6.10), sqlfluff-templater-dbt (3.3.1) +2 more potentially affected by CVE-2026-46374 via sqlfluff (3.3.1)

sqlfluff PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.8, =1.6.10 - sqlfluff-templater-dbt 3.3.1 - sqllineage 1.5.4 - txt2sql 0.2.0 Source cves: CVE-2026-46374 Source advisory...

cumulus-library (>=0.1.2, <=1.4.0), cumulus-library-covid (>=0.1.2, <=0.2.2) +3 more potentially affected by CVE-2026-46374 via sqlfluff (2.0.2)

sqlfluff PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cumulus-library =0.1.2, =0.1.2, =0.13.3.1, =1.0.3, =1.1.0.1 - sqlfluff-templater-dbt 2.0.2 Source cves: CVE-2026-46374 Source advisory:...

sqlfluff-templater-dbt (3.4.1) potentially affected by CVE-2026-46374 via sqlfluff (3.4.1)

sqlfluff PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.4.1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (3.1.0) potentially affected by CVE-2026-46374 via sqlfluff (3.1.0)

sqlfluff PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.1.0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (3.2.1) potentially affected by CVE-2026-46374 via sqlfluff (3.2.1)

sqlfluff PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.2.1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

apache-airflow-providers-fastetl (>=0.0.36, <=0.0.39), cdbt (>=0.4.6, <=0.4.9) +3 more potentially affected by CVE-2026-46374 via sqlfluff (3.0.7)

sqlfluff PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - apache-airflow-providers-fastetl =0.0.36, =0.4.6, =1.3.1, =1.3.0.0, =1.4.8.1 - sqlfluff-templater-dbt 3.0.7 Source cves: CVE-2026-46374 Source...

collate-sqllineage (>=1.6.4, <=1.6.7), dbt-coves (>=1.1.1a1, <=1.1.1a6) +2 more potentially affected by CVE-2026-46374 via sqlfluff (3.1.1)

sqlfluff PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.4, =1.1.1a1, =1.1.1a6 - sqlfluff-templater-dataform 0.1.0 - sqlfluff-templater-dbt 3.1.1 Source cves: CVE-2026-46374...

sqlfluff-templater-dataform (0.1.2), sqlfluff-templater-dbt (3.2.3) potentially affected by CVE-2026-46374 via sqlfluff (3.2.3)

sqlfluff PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.2 - sqlfluff-templater-dbt 3.2.3 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dataform (0.1.3), sqlfluff-templater-dbt (3.2.4) potentially affected by CVE-2026-46374 via sqlfluff (3.2.4)

sqlfluff PYPI version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.3 - sqlfluff-templater-dbt 3.2.4 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

cdbt (>=0.4.14, <=0.4.26), sqlfluff-templater-dataform (0.1.5) +1 more potentially affected by CVE-2026-46374 via sqlfluff (3.3.0)

sqlfluff PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cdbt =0.4.14, =0.4.26 - sqlfluff-templater-dataform 0.1.5 - sqlfluff-templater-dbt 3.3.0 Source cves: CVE-2026-46374 Source advisory:...

sqlfluff-templater-dbt (3.4.2) potentially affected by CVE-2026-46374 via sqlfluff (3.4.2)

sqlfluff PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.4.2 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

GHSA-73JC-5MRQ-PRW7 SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser

Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious long query to any application using the parser to trigger a Denial of Service through resource exhaustion. Patches Versions 4.2.0 and up contain a configurable parse node...

alvin-cli (>=0.2.0, <=1.2.0rc14) potentially affected by CVE-2026-46374 via sqlfluff (0.13.0)

sqlfluff PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =0.2.0, =1.2.0rc14 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (1.2.1) potentially affected by CVE-2026-46374 via sqlfluff (1.2.1)

sqlfluff PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.2.1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

dbt-coves (>=1.0.4a27, <=1.1.1a0) potentially affected by CVE-2026-46374 via sqlfluff (0.11.2)

sqlfluff PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =1.0.4a27, =1.1.1a0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...