andialbrecht/sqlparse Security Advisories | GitStock

medium2026-09-01

sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption

GHSA-cfqr-cjx5-5jcm · CVE-2026-84305

high2026-08-17

sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)

GHSA-prg7-hcfm-mfcr · CVE-2026-59893

high2026-08-17

sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger

GHSA-pwgv-4x5q-6m9f · CVE-2026-54284

high2026-08-17

sqlparse: Quadratic O(n²) DoS in group_comments

GHSA-f2ff-p2ww-7p4p · CVE-2026-71491

medium2026-08-17

sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes

GHSA-3496-9g83-7v6x · CVE-2026-59894

medium2026-02-13

sqlparse: formatting list of tuples leads to denial of service

GHSA-27jp-wm6q-gp25

high2024-04-15

sqlparse parsing heavily nested list leads to Denial of Service

GHSA-2m57-hf25-phgg · CVE-2024-4340

medium2023-04-21

sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service

GHSA-rrm6-wvj7-cwh2 · CVE-2023-30608