CVE-2024-4340

Advisory

Sqllineage 1.5.3 updates its dependency 'sqlparse' to v0.5.0 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This is a security release to upgrade some dependencies to latest version as we receive vulnerability alerts.
We strongly recommend that all sqllineage installations be upgraded to this version immediately.

This release also includes an improvement regarding metadata provider.

Enhancement
-------------
* set target table column name from MetaDataProvider (`528`) delphisharp

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4340
• https://github.com/reata/sqllineage/commit/942fcf4e5578da3f3ce22501b17fbceb5ea9c350