What’s Vulnerable › Products

andialbrecht sqlparse vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your andialbrecht sqlparse version is affected

Latest andialbrecht sqlparse vulnerabilities

• CVE-2026-112307 — sqlparse through 0.6.0 PHP Code Injection via output_format='php' (CVSS 7.3)
• CVE-2026-84305 — sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption (CVSS 5.1)
• CVE-2026-71491 — sqlparse: Quadratic O(n²) DoS in group_comments (CVSS 8.7)
• CVE-2026-59894 — sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes (CVSS 6.2)
• CVE-2026-59893 — sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service) (CVSS 7.5)
• CVE-2026-54284 — sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger (CVSS 8.7)
• CVE-2024-4340 — Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. (CVSS 7.5)
• CVE-2023-30608 — Parser contains an inefficient regular expression in sqlparse (CVSS 7.5)
• CVE-2021-32839 — Regular Expression Denial of Service in sqlparse (CVSS 5.0)