{"action":"Upgrade sqlfluff to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"0"}],"component":"sqlfluff","cve_ids":["CVE-2026-46373"],"ecosystem":"PyPI","epss":0.00263,"exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-wmhf-fqc8-vxhh","id":"tcs_01M5KG2FJVDPGTZ4X57XEENDMG","modified_at":"2026-07-06T23:00:09.335545482Z","published_at":"2026-05-19T20:10:17Z","references":["https://osv.dev/vulnerability/GHSA-wmhf-fqc8-vxhh","https://github.com/sqlfluff/sqlfluff/security/advisories/GHSA-wmhf-fqc8-vxhh","https://nvd.nist.gov/vuln/detail/CVE-2026-46373","https://github.com/pypa/advisory-database/tree/main/vulns/sqlfluff/PYSEC-2026-209.yaml","https://github.com/sqlfluff/sqlfluff"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wmhf-fqc8-vxhh","url":"https://osv.dev/vulnerability/GHSA-wmhf-fqc8-vxhh"}],"summary":"SQLFluff: Recursive Stack Overflow in Parser"}