Red Hat Security Advisory: RHOSP 17.1.4 (python-sqlparse) security update

Fixed packages 2

Vulnerabilities 1

• High 7.5
  CVE-2024-4340

  Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

  Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

  kubeflow-pipelines-visualization-server sqlparse sqlparse sqlparse Debian Ubuntu Wolfi PyPI
  Apr 30, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278038
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9986.json
• report
  https://access.redhat.com/security/cve/CVE-2024-4340
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-4340
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-4340
• advisory
  https://github.com/advisories/GHSA-2m57-hf25-phgg