Skip to content
OpenAdvisories

Vendor

sqlfluff

3 known vulnerabilities.

Products

sqlfluff 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2023-36830

    SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.

    SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the `library_path` config value to allow arbitrary python code to …

    sqlfluff sqlfluff sqlfluff sqlfluff Debian Ubuntu PyPI