High USN-6771-1 1 CVE

sqlparse vulnerability

Published May 13, 2024 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that SQL parse incorrectly handled certain nested lists.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	sqlparse	0.4.2-1ubuntu0.22.04.2
Ubuntu · 24.04 LTS 24.04:LTS	sqlparse	0.4.4-1ubuntu0.1

Vulnerabilities 1

High 7.5

CVE-2024-4340

Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

kubeflow-pipelines-visualization-server sqlparse sqlparse sqlparse Debian Ubuntu Wolfi PyPI

Apr 30, 2024

References

report
https://ubuntu.com/security/CVE-2024-4340