Vulnerabilities for sqlfluff

First version without a known vulnerability: 4.2.0

Details

• GHSA-73jc-5mrq-prw72026-05-19

  SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser

  Fixed in: 4.2.0

• GHSA-wmhf-fqc8-vxhh2026-05-19

  SQLFluff: Recursive Stack Overflow in Parser

  Fixed in: 4.1.0

• GHSA-jqhc-m2j3-fjrx2023-07-06

  SQLFluff users with access to config file, using `libary_path` may call arbitrary python code

  Fixed in: 2.1.2