python3Packages.sqlparse
sqlparse 0.5.5 · pkgs/development/python-modules/sqlparse/default.nix
Health
Risk
risk 74 critical
- +60 5 open advisories
- +8 an OSV advisory has a public exploit (CISA)
- +6 no maintainer
Version
0.5.5 no newer release known to repology
Channels
Hydra
succeeded 10y ago
Advisories
GHSA-3496-9g83-7v6x medium sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes (OSV, for this version)
CVE-2026-59894
GHSA-cfqr-cjx5-5jcm medium EPSS 0.2% sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption (OSV, for this version)
CVE-2026-84305
GHSA-f2ff-p2ww-7p4p high sqlparse: Quadratic O(n²) DoS in group_comments (OSV, for this version)
CVE-2026-71491
GHSA-prg7-hcfm-mfcr high sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service) (OSV, for this version)
CVE-2026-59893
GHSA-pwgv-4x5q-6m9f high 8.7 public exploit sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger (OSV, for this version)
CVE-2026-54284
Packaging
not read yet: the next index sweep reads it
Maintainers
none
Pull requests 0
None open.
Issues 1
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption 1.severity: security
#559072 by nixpkgs-security-tracker · opened 6w ago · 0 comments