collate-sqllineage (>=1.1.5, <=1.2.4), openmetadata-ingestion (>=1.0.0.0, <=1.0.1.3) +3 more potentially affected by CVE-2026-46373 via sqlfluff (2.1.4)

sqlfluff PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.1.5, =1.0.0.0, =1.0.1.3 - openmetadata-sqllineage 1.1.2.0 - sqlfluff-templater-dbt 2.1.4 - sqllineage 1.4.7 Source cves:...

apache-airflow-providers-fastetl (>=0.0.36, <=0.0.39), cdbt (>=0.4.6, <=0.4.9) +3 more potentially affected by CVE-2026-46373 via sqlfluff (3.0.7)

sqlfluff PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - apache-airflow-providers-fastetl =0.0.36, =0.4.6, =1.3.1, =1.3.0.0, =1.6.1.0 - sqlfluff-templater-dbt 3.0.7 Source cves: CVE-2026-46373 Source...

openmetadata-ingestion (>=0.13.2.6, <=0.13.3.0), openmetadata-sqllineage (1.0.2) +1 more potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a6)

sqlfluff PYPI version 2.0.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - openmetadata-ingestion =0.13.2.6, =0.13.3.0 - openmetadata-sqllineage 1.0.2 - sqlfluff-templater-dbt 2.0.0a6 Source cves: CVE-2026-46373 Sourc...

cumulus-library (>=0.1.2, <=1.4.0), cumulus-library-covid (>=0.1.2, <=0.2.2) +3 more potentially affected by CVE-2026-46373 via sqlfluff (2.0.2)

sqlfluff PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cumulus-library =0.1.2, =0.1.2, =0.13.3.1, =1.0.3, =1.1.0.1 - sqlfluff-templater-dbt 2.0.2 Source cves: CVE-2026-46373 Source advisory:...

alvin-cli (>=1.1.9, <=1.2.0), cumulus-library (>=0.1.2, <=1.4.0) +6 more potentially affected by CVE-2023-36830 via sqlfluff (>=2.0.0a1, <=2.1.1)

sqlfluff PYPI version =2.0.0a1, =1.1.9, =0.1.2, =0.1.2, =0.13.2.6, =1.0.2, =2.0.0a1, =1.4.2, =0.1.0, =0.1.1 Source cves: CVE-2023-36830 Source advisory: GHSA-JQHC-M2J3-FJRX...