dbt-superset-lineage (>=0.1.0, <=0.2.1), dwhgen (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2026-46373 via sqlfluff (0.8.2)

sqlfluff PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-superset-lineage =0.1.0, =0.1.1, =0.1.5, =0.2.7 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2026-46373 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.4.4) potentially affected by CVE-2026-46373 via sqlfluff (1.4.4)

sqlfluff PYPI version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.4 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.4.1) potentially affected by CVE-2026-46373 via sqlfluff (1.4.1)

sqlfluff PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

dbt-coves (>=1.0.4a27, <=1.1.1a0) potentially affected by CVE-2026-46373 via sqlfluff (0.11.2)

sqlfluff PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =1.0.4a27, =1.1.1a0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dataform (0.1.2), sqlfluff-templater-dbt (3.2.3) potentially affected by CVE-2026-46373 via sqlfluff (3.2.3)

sqlfluff PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.2 - sqlfluff-templater-dbt 3.2.3 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

odd-cli (>=0.1.1, <=0.1.10), odd-collector-sdk (>=0.2.4, <=0.3.56) +4 more potentially affected by CVE-2026-46373 via sqlfluff (3.0.3)

sqlfluff PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - odd-cli =0.1.1, =0.2.4, =0.2.3, =2.0.32, =2.0.46 - sqlfluff-templater-dbt 3.0.3 - sqllineage 1.5.2 Source cves: CVE-2026-46373 Source advisory:...

sqlfluff-templater-dbt (2.0.5) potentially affected by CVE-2026-46373 via sqlfluff (2.0.5)

sqlfluff PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.5 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

cdbt (>=0.4.10, <=0.4.13), sqlfluff-templater-dataform (0.1.4) +1 more potentially affected by CVE-2026-46373 via sqlfluff (3.2.5)

sqlfluff PYPI version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cdbt =0.4.10, =0.4.13 - sqlfluff-templater-dataform 0.1.4 - sqlfluff-templater-dbt 3.2.5 Source cves: CVE-2026-46373 Source advisory:...

dbt-osmosis (>=0.9.3, <=0.10.0), dbt-superset-lineage (>=0.3.0, <=0.3.2) +3 more potentially affected by CVE-2026-46373 via sqlfluff (1.4.5)

sqlfluff PYPI version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-osmosis =0.9.3, =0.3.0, =0.8.0, =0.0.0, =0.0.1 - sqlfluff-templater-dbt 1.4.5 Source cves: CVE-2026-46373 Source advisory:...

sqlfluff-templater-dbt (2.0.1) potentially affected by CVE-2026-46373 via sqlfluff (2.0.1)

sqlfluff PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.3.0) potentially affected by CVE-2026-46373 via sqlfluff (2.3.0)

sqlfluff PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.3.0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dataform (0.1.3), sqlfluff-templater-dbt (3.2.4) potentially affected by CVE-2026-46373 via sqlfluff (3.2.4)

sqlfluff PYPI version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dataform 0.1.3 - sqlfluff-templater-dbt 3.2.4 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.4.0) potentially affected by CVE-2026-46373 via sqlfluff (1.4.0)

sqlfluff PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (3.0.1) potentially affected by CVE-2026-46373 via sqlfluff (3.0.1)

sqlfluff PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.0.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (3.0.0a3) potentially affected by CVE-2026-46373 via sqlfluff (3.0.0a3)

sqlfluff PYPI version 3.0.0a3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 3.0.0a3 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (1.3.0) potentially affected by CVE-2026-46373 via sqlfluff (1.3.0)

sqlfluff PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

sqlfluff-templater-dbt (2.0.6) potentially affected by CVE-2026-46373 via sqlfluff (2.0.6)

sqlfluff PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.0.6 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

GHSA-WMHF-FQC8-VXHH SQLFluff: Recursive Stack Overflow in Parser

Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any application using the parser to trigger a Denial of Service through resource exhaustion. Patches Versions 4.1.0 and up contain ...

alvin-cli (>=1.3.0rc1, <=1.3.0), openmetadata-sqllineage (>=1.1.0.2, <=1.1.0.3) +1 more potentially affected by CVE-2026-46373 via sqlfluff (2.1.2)

sqlfluff PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =1.3.0rc1, =1.1.0.2, =1.1.0.3 - sqlfluff-templater-dbt 2.1.2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...