alvin-cli (>=1.3.0rc1, <=1.3.0), openmetadata-sqllineage (>=1.1.0.2, <=1.1.0.3) +1 more potentially affected by CVE-2026-46373 via sqlfluff (2.1.2)

sqlfluff PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =1.3.0rc1, =1.1.0.2, =1.1.0.3 - sqlfluff-templater-dbt 2.1.2 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

collate-sqllineage (>=1.1.5, <=1.2.4), openmetadata-ingestion (>=1.0.0.0, <=1.0.1.3) +3 more potentially affected by CVE-2026-46373 via sqlfluff (2.1.4)

sqlfluff PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - collate-sqllineage =1.1.5, =1.0.0.0, =1.0.1.3 - openmetadata-sqllineage 1.1.2.0 - sqlfluff-templater-dbt 2.1.4 - sqllineage 1.4.7 Source cves:...

openmetadata-ingestion (>=0.13.2.6, <=0.13.3.0), openmetadata-sqllineage (1.0.2) +1 more potentially affected by CVE-2026-46373 via sqlfluff (2.0.0a6)

sqlfluff PYPI version 2.0.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - openmetadata-ingestion =0.13.2.6, =0.13.3.0 - openmetadata-sqllineage 1.0.2 - sqlfluff-templater-dbt 2.0.0a6 Source cves: CVE-2026-46373 Sourc...

cumulus-library (>=0.1.2, <=1.4.0), cumulus-library-covid (>=0.1.2, <=0.2.2) +3 more potentially affected by CVE-2026-46373 via sqlfluff (2.0.2)

sqlfluff PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - cumulus-library =0.1.2, =0.1.2, =0.13.3.1, =1.0.3, =1.1.0.1 - sqlfluff-templater-dbt 2.0.2 Source cves: CVE-2026-46373 Source advisory:...

alvin-cli (>=1.3.0rc1, <=1.3.0), openmetadata-sqllineage (>=1.1.0.2, <=1.1.0.3) +1 more potentially affected by CVE-2026-46373 via sqlfluff (2.1.2)

sqlfluff PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =1.3.0rc1, =1.1.0.2, =1.1.0.3 - sqlfluff-templater-dbt 2.1.2 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

alvin-cli (>=1.1.9, <=1.2.0), cumulus-library (>=0.1.2, <=1.4.0) +6 more potentially affected by CVE-2023-36830 via sqlfluff (>=2.0.0a1, <=2.1.1)

sqlfluff PYPI version =2.0.0a1, =1.1.9, =0.1.2, =0.1.2, =0.13.2.6, =1.0.2, =2.0.0a1, =1.4.2, =0.1.0, =0.1.1 Source cves: CVE-2023-36830 Source advisory: GHSA-JQHC-M2J3-FJRX...