andialbrecht sqlparse vulnerabilities
8 published CVEs name andialbrecht sqlparse among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112307
sqlparse through 0.6.0 PHP Code Injection via output_format='php'
andialbrecht · sqlparse
High8.4 - CVE-2026-84305
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
andialbrecht · sqlparse
Medium5.1 - CVE-2026-54284
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
andialbrecht · sqlparse
High8.7 - CVE-2026-59893
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
andialbrecht · sqlparse
High7.5 - CVE-2026-71491
sqlparse: Quadratic O(n²) DoS in group_comments
andialbrecht · sqlparse
High8.7 - CVE-2026-59894
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes
andialbrecht · sqlparse
Medium6.2 - CVE-2023-30608
Parser contains an inefficient regular expression in sqlparse
andialbrecht · sqlparse
Medium5.5 - CVE-2021-32839
Regular Expression Denial of Service in sqlparse
andialbrecht · sqlparse
High7.5