Sqlfluff vulnerabilities
We track 3 vulnerabilities in Sqlfluff products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2026.
Latest Sqlfluff vulnerabilities
- 7.5 High severity
sqlfluff: Uncontrolled Resource Consumption
SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious long query to
- 7.5 High severity
sqlfluff: Uncontrolled Recursion
SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with de
- 7.8 High severity
sqlfluff: Improper Neutralization of Special Elements in Output Used by a Downstream Component
SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the `library_path` config value to allow arbitrary python code to b