Skip to content
OpenAdvisories
Medium DLA-3425-1 1 CVE

sqlparse - security update

Published May 16, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 sqlparse 0.2.4-1+deb10u1

Vulnerabilities 1

  • Medium 5.5

    Parser contains an inefficient regular expression in sqlparse

    sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability m…