What’s Vulnerable › Products

sqlfluff vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your sqlfluff version is affected

Latest sqlfluff vulnerabilities

• CVE-2026-46374 — SQLFluff: Uncontrolled Resource Consumption in Parser (CVSS 7.5)
• CVE-2026-46373 — SQLFluff: Recursive Stack Overflow in Parser (CVSS 7.5)
• CVE-2023-36830 — SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code. (CVSS 7.8)