Skip to content
OpenAdvisories
Medium USN-6064-1 1 CVE

sqlparse vulnerability

Published May 10, 2023 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that SQL parse incorrectly handled certain regular expression.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS sqlparse 0.2.4-0.1ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS sqlparse 0.2.4-3ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS sqlparse 0.4.2-1ubuntu0.22.04.1

Vulnerabilities 1

  • Medium 5.5
    CVE-2023-30608

    Parser contains an inefficient regular expression in sqlparse

    sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability m…

    andialbrecht sqlparse sqlparse sqlparse Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-30608