dbt-coves (>=1.0.4a27, <=1.1.1a0) potentially affected by CVE-2026-46374 via sqlfluff (0.11.2)

sqlfluff PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =1.0.4a27, =1.1.1a0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2026-46374 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

dbt-coves (>=0.19.1a7, <=0.21.0a1), jsqlib (>=0.3.0a0, <=0.8.0a0) potentially affected by CVE-2026-46374 via sqlfluff (0.6.9)

sqlfluff PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.19.1a7, =0.3.0a0, =0.8.0a0 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

dbt-coves (0.21.0a17) potentially affected by CVE-2026-46374 via sqlfluff (0.9.3)

sqlfluff PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves 0.21.0a17 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

dbt-coves (>=0.21.0a18, <=0.21.1a20) potentially affected by CVE-2026-46374 via sqlfluff (0.9.4)

sqlfluff PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a18, =0.21.1a20 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

collate-sqllineage (>=1.6.4, <=1.6.7), dbt-coves (>=1.1.1a1, <=1.1.1a6) +2 more potentially affected by CVE-2026-46373 via sqlfluff (3.1.1)

sqlfluff PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.6.4, =1.1.1a1, =1.1.1a6 - sqlfluff-templater-dataform 0.1.0 - sqlfluff-templater-dbt 3.1.1 Source cves: CVE-2026-46373...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2026-46373 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

dbt-coves (0.21.0a17) potentially affected by CVE-2026-46373 via sqlfluff (0.9.3)

sqlfluff PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves 0.21.0a17 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

dbt-coves (>=0.19.1a7, <=0.21.0a1), jsqlib (>=0.3.0a0, <=0.8.0a0) potentially affected by CVE-2026-46373 via sqlfluff (0.6.9)

sqlfluff PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.19.1a7, =0.3.0a0, =0.8.0a0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

dbt-coves (>=0.21.0a18, <=0.21.1a20) potentially affected by CVE-2026-46373 via sqlfluff (0.9.4)

sqlfluff PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a18, =0.21.1a20 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

dbt-coves (>=1.0.4a27, <=1.1.1a0) potentially affected by CVE-2026-46373 via sqlfluff (0.11.2)

sqlfluff PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =1.0.4a27, =1.1.1a0 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-34726 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-34726 Source advisory: OSV:PYSEC-2026-2134...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-34730 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-34730 Source advisory: OSV:PYSEC-2026-2135...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-34730 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-34730 Source advisory: OSV:GHSA-HGJQ-P8CR-GG4H...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-34726 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-34726 Source advisory: OSV:GHSA-85V3-4M8G-HRH6...

acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9), balto-core (>=0.1.5, <=0.1.7) +45 more potentially affected by CVE-2026-29790 via dbt-common (>=1.0.0b2, <=1.33.0)

dbt-common PYPI version =1.0.0b2, =0.1.7, =0.1.5, =0.21.7, =0.0.1rc1, =0.1.0a1, =1.8.0, =1.8.0b2, =1.8.0, =1.8.0rc1, =1.8.0, =1.8.2 and more Source cves: CVE-2026-29790 Source advisory: OSV:GHSA-W75W-9QV4-J5XJ...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-23986 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-23986 Source advisory: OSV:GHSA-4FQP-R85R-HXQH...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-23968 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-23968 Source advisory: OSV:GHSA-XJHM-GP88-8PFX...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2025-55201 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2025-55201 Source advisory: OSV:GHSA-3XW7-V6CJ-5Q8H...

bizzflow-toolkit (2.3.0.dev3), dbt (>=0.19.0rc1, <=0.19.2) +11 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.3.6)

snowflake-connector-python PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - bizzflow-toolkit 2.3.0.dev3 - dbt =0.19.0rc1, =0.3.1, =1.9.1, =0.5.0, =0.1.0, =2.8.1, =1.0.11, =2.4.0,...