dbnd-snowflake (>=0.48.0, <=1.0.4.22), dbt (>=0.21.0b1, <=0.21.1) +7 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.5.1)

snowflake-connector-python PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbnd-snowflake =0.48.0, =0.21.0b1, =0.21.0a17, =0.4.1, =0.21.0b1, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.4.0...

dbnd-snowflake (>=0.48.0, <=1.0.4.22), dbt (>=0.21.0b1, <=0.21.1) +7 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.5.1)

snowflake-connector-python PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbnd-snowflake =0.48.0, =0.21.0b1, =0.21.0a17, =0.4.1, =0.21.0b1, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.4.0...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-23968 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-23968 Source advisory: OSV:PYSEC-2026-1274...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-23986 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-23986 Source advisory: OSV:PYSEC-2026-1272...

algokit (>=0.2.0, <=1.6.0), algorun (>=0.0.1b1, <=0.0.1b4) +12 more potentially affected by CVE-2026-23986 via copier (7.2.0)

copier PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - algokit =0.2.0, =0.0.1b1, =2.2.4, =0.0.1a3, =0.3.0, =0.6.0, =0.9.0, =0.1.16, =1.14.0 Source cves: CVE-2026-23986 Source advisory: OSV:PYSEC-2026-127...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2025-55201 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2025-55201 Source advisory: OSV:PYSEC-2026-1271...

algokit (>=0.2.0, <=1.6.0), algorun (>=0.0.1b1, <=0.0.1b4) +12 more potentially affected by CVE-2025-55201 via copier (7.2.0)

copier PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - algokit =0.2.0, =0.0.1b1, =2.2.4, =0.0.1a3, =0.3.0, =0.6.0, =0.9.0, =0.1.16, =1.14.0 Source cves: CVE-2025-55201 Source advisory: OSV:PYSEC-2026-127...

algokit (>=0.2.0, <=2.8.0), algorun (>=0.0.1b1, <=0.0.1b4) +34 more potentially affected by CVE-2025-55214 via copier (>=7.1.0, <=9.9.0)

copier PYPI version =7.1.0, =0.2.0, =0.0.1b1, =0.11.0, =2.2.2, =2.0.0, =0.9.0, =0.10.0, =0.1.1, =0.1.10, =0.0.1a3, =0.5.0, =1.6.0b0, =1.3.3, =1.3.5 and more Source cves: CVE-2025-55214 Source advisory: OSV:PYSEC-2026-1273...

dbt-coves (>=0.21.0a18, <=0.21.1a20) potentially affected by CVE-2026-46374 via sqlfluff (0.9.4)

sqlfluff PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a18, =0.21.1a20 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

dbt-coves (>=0.19.1a7, <=0.21.0a1), jsqlib (>=0.3.0a0, <=0.8.0a0) potentially affected by CVE-2026-46373 via sqlfluff (0.6.9)

sqlfluff PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.19.1a7, =0.3.0a0, =0.8.0a0 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2026-46374 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

dbt-coves (0.21.0a17) potentially affected by CVE-2026-46373 via sqlfluff (0.9.3)

sqlfluff PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves 0.21.0a17 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

dbt-coves (0.21.0a17) potentially affected by CVE-2026-46374 via sqlfluff (0.9.3)

sqlfluff PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves 0.21.0a17 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

dbt-coves (>=0.21.0a18, <=0.21.1a20) potentially affected by CVE-2026-46373 via sqlfluff (0.9.4)

sqlfluff PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a18, =0.21.1a20 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

dbt-coves (>=1.0.4a27, <=1.1.1a0) potentially affected by CVE-2026-46373 via sqlfluff (0.11.2)

sqlfluff PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =1.0.4a27, =1.1.1a0 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

dbt-coves (>=1.0.4a27, <=1.1.1a0) potentially affected by CVE-2026-46374 via sqlfluff (0.11.2)

sqlfluff PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =1.0.4a27, =1.1.1a0 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

collate-sqllineage (>=1.6.4, <=1.6.7), dbt-coves (>=1.1.1a1, <=1.1.1a6) +2 more potentially affected by CVE-2026-46373 via sqlfluff (3.1.1)

sqlfluff PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.4, =1.1.1a1, =1.1.1a6 - sqlfluff-templater-dataform 0.1.0 - sqlfluff-templater-dbt 3.1.1 Source cves: CVE-2026-46373...

dbt-coves (>=0.19.1a7, <=0.21.0a1), jsqlib (>=0.3.0a0, <=0.8.0a0) potentially affected by CVE-2026-46374 via sqlfluff (0.6.9)

sqlfluff PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.19.1a7, =0.3.0a0, =0.8.0a0 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2026-46373 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

collate-sqllineage (>=1.6.4, <=1.6.7), dbt-coves (>=1.1.1a1, <=1.1.1a6) +2 more potentially affected by CVE-2026-46374 via sqlfluff (3.1.1)

sqlfluff PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.4, =1.1.1a1, =1.1.1a6 - sqlfluff-templater-dataform 0.1.0 - sqlfluff-templater-dbt 3.1.1 Source cves: CVE-2026-46374...