alvin-cli (0.0.1a0) potentially affected by CVE-2023-36830 via sqlfluff (0.12.0)

sqlfluff PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli 0.0.1a0 Source cves: CVE-2023-36830 Source advisory: OSV:GHSA-JQHC-M2J3-FJRX...

alvin-cli (>=1.1.9, <=1.2.0), cumulus-library (>=0.1.2, <=1.4.0) +6 more potentially affected by CVE-2023-36830 via sqlfluff (>=2.0.0a1, <=2.1.1)

sqlfluff PYPI version =2.0.0a1, =1.1.9, =0.1.2, =0.1.2, =0.13.2.6, =1.0.2, =2.0.0a1, =1.4.2, =0.1.0, =0.1.1 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

alvin-cli (>=0.2.0, <=1.2.0rc14) potentially affected by CVE-2023-36830 via sqlfluff (0.13.0)

sqlfluff PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =0.2.0, =1.2.0rc14 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

alvin-cli (0.0.1a0) potentially affected by CVE-2023-36830 via sqlfluff (0.12.0)

sqlfluff PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli 0.0.1a0 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

alvin-cli (>=0.0.1a0, <=1.2.0), cumulus-library (>=0.1.2, <=1.4.0) +15 more potentially affected by CVE-2023-36830 via sqlfluff (>=0.6.9, <=2.1.1)

sqlfluff PYPI version =0.6.9, =0.0.1a0, =0.1.2, =0.1.2, =0.19.1a7, =0.9.3, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.3.0a0, =0.13.2.6, =1.0.2, =0.8.0, =0.0.0, =1.2.1, =2.1.1 and more Source cves: CVE-2023-36830 Source advisory: MEND:CVE-2023-36830...