Arbitrary Code Execution

sqlfluff is vulnerable to Arbitrary Code Execution. The vulnerability exists because the extractlibrariesfromconfig function of jinja.py does not properly enable the CLI option to override the librarypath option in the template, allowing an attacker with access to the config file to inject and...