Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2026-46373

2 месяца назад

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any application using the parser to trigger a Denial of Service through resource exhaustion. This issue has been patched in version 4.1.0.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2026-46373

2 месяца назад

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any application using the parser to trigger a Denial of Service through resource exhaustion. This issue has been patched in version 4.1.0.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2026-46373

2 месяца назад

SQLFluff is a modular SQL linter and auto-formatter with support for m ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-wmhf-fqc8-vxhh

3 месяца назад

SQLFluff: Recursive Stack Overflow in Parser

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-46373

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any application using the parser to trigger a Denial of Service through resource exhaustion. This issue has been patched in version 4.1.0.

CVSS3: 7.5
0%
Низкий
2 месяца назад
nvd логотип
CVE-2026-46373

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any application using the parser to trigger a Denial of Service through resource exhaustion. This issue has been patched in version 4.1.0.

CVSS3: 7.5
0%
Низкий
2 месяца назад
debian логотип
CVE-2026-46373

SQLFluff is a modular SQL linter and auto-formatter with support for m ...

CVSS3: 7.5
0%
Низкий
2 месяца назад
github логотип
GHSA-wmhf-fqc8-vxhh

SQLFluff: Recursive Stack Overflow in Parser

CVSS3: 7.5
0%
Низкий
3 месяца назад

Уязвимостей на страницу