Skip to content
OpenAdvisories

Package · Wolfi

py3.14-sqlparse

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2026-112307

    sqlparse through 0.6.0 PHP Code Injection via output_format='php'

    sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed ${expr} or {${expr}} sequences that OutputPHPFilter places in doubl…

    andialbrecht sqlparse sqlparse sqlparse Debian Ubuntu Wolfi