sqlfluff-templater-dbt (1.4.3) potentially affected by CVE-2026-46374 via sqlfluff (1.4.3)

sqlfluff PYPI version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.3 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (1.4.4) potentially affected by CVE-2026-46374 via sqlfluff (1.4.4)

sqlfluff PYPI version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.4 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (2.0.0a1) potentially affected by CVE-2026-46374 via sqlfluff (2.0.0a1)

sqlfluff PYPI version 2.0.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0a1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

dbt-osmosis (>=0.9.3, <=0.10.0), dbt-superset-lineage (>=0.3.0, <=0.3.2) +3 more potentially affected by CVE-2026-46374 via sqlfluff (1.4.5)

sqlfluff PYPI version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-osmosis =0.9.3, =0.3.0, =0.8.0, =0.0.0, =0.0.1 - sqlfluff-templater-dbt 1.4.5 Source cves: CVE-2026-46374 Source advisory:...

dbt-coves (>=0.21.0a18, <=0.21.1a20) potentially affected by CVE-2026-46374 via sqlfluff (0.9.4)

sqlfluff PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a18, =0.21.1a20 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (2.0.0) potentially affected by CVE-2026-46374 via sqlfluff (2.0.0)

sqlfluff PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (3.0.0a5) potentially affected by CVE-2026-46374 via sqlfluff (3.0.0a5)

sqlfluff PYPI version 3.0.0a5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.0.0a5 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (3.0.0) potentially affected by CVE-2026-46374 via sqlfluff (3.0.0)

sqlfluff PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.0.0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

mdbt (>=0.5.1, <=0.6.0), sqlfluff-templater-dataform (>=0.1.8, <=0.1.14) +2 more potentially affected by CVE-2026-46374 via sqlfluff (>=4.0.0a1, <=4.1.0)

sqlfluff PYPI version =4.0.0a1, =0.5.1, =0.1.8, =4.0.0a1, =4.1.0 - stylebook 0.1.0 Source cves: CVE-2026-46374 Source advisory: SNYK:PYTHON-SQLFLUFF-16770152...

mdbt (>=0.5.1, <=0.6.0), sqlfluff-templater-dataform (>=0.1.8, <=0.1.14) +2 more potentially affected by CVE-2026-46374 via sqlfluff (>=4.0.0a1, <=4.1.0)

sqlfluff PYPI version =4.0.0a1, =0.5.1, =0.1.8, =4.0.0a1, =4.1.0 - stylebook 0.1.0 Source cves: CVE-2026-46374 Source advisory: GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (1.4.1) potentially affected by CVE-2026-46374 via sqlfluff (1.4.1)

sqlfluff PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (1.4.0) potentially affected by CVE-2026-46374 via sqlfluff (1.4.0)

sqlfluff PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

Allocation of Resources Without Limits or Throttling

Overview sqlfluff is a The SQL Linter for Humans Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the Parser, ParseContext, and Rust parser match-tree handling in the parser components. An attacker can force excessive parse-tree grow...

alvin-cli (0.0.1a0) potentially affected by CVE-2026-46374 via sqlfluff (0.12.0)

sqlfluff PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli 0.0.1a0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser

Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious long query to any application using the parser to trigger a Denial of Service through resource exhaustion. Patches Versions 4.2.0 and up contain a configurable parse node...

sqlfluff-templater-dbt (3.2.2) potentially affected by CVE-2026-46374 via sqlfluff (3.2.2)

sqlfluff PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.2.2 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (2.1.3) potentially affected by CVE-2026-46374 via sqlfluff (2.1.3)

sqlfluff PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.1.3 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

data-designer (>=0.1.0, <=0.2.1), sqlfluff-templater-dataform (0.1.1) +1 more potentially affected by CVE-2026-46374 via sqlfluff (3.2.0)

sqlfluff PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - data-designer =0.1.0, =0.2.1 - sqlfluff-templater-dataform 0.1.1 - sqlfluff-templater-dbt 3.2.0 Source cves: CVE-2026-46374 Source advisory:...

sqlfluff-templater-dbt (2.0.4) potentially affected by CVE-2026-46373 via sqlfluff (2.0.4)

sqlfluff PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.4 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

alvin-cli (>=0.2.0, <=1.2.0rc14) potentially affected by CVE-2026-46373 via sqlfluff (0.13.0)

sqlfluff PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =0.2.0, =1.2.0rc14 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...