Сообщество свободного программного обеспечения Sqlparse

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical1high1medium0low
updated 2026-10-30
01

vulnerabilities (5)

Related CVEs.

IDseverity exploitable
CVE-2024-4340US——
Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.
CVE-2021-32839USmedium5.0—
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regul…
CVE-2023-30608UShigh7.5—
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial…
CVE-2026-84305US——
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlformat --reindent route attacker-controlled parenthesized tupl…
showing 4 of 5
02

weaknesses (4)

The flaw types (CWEs) most of these CVEs share.

  • CWE-400Uncontrolled Resource Consumption2 CVEs
  • CWE-1333Inefficient Regular Expression Complexity1 CVEs
  • CWE-407Inefficient Algorithmic Complexity1 CVEs
  • CWE-674Uncontrolled Recursion1 CVEs
03

sources (1)

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan