Sqlfluff

3 CVEs in 1 Sqlfluff product, including Sqlfluff. Newest: CVE-2026-46374 (2026-06-09). Severity, EPSS and public exploits for each.

Sqlfluff products with known CVEs

ProductCVEs
Sqlfluff3
Sqlfluff CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-46374High7.52026-06-09SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrust…
CVE-2026-46373High7.52026-06-09SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrust…
CVE-2023-36830Medium6.32023-07-06SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerab…