sqlparse: formatting list of tuples leads to denial of service

概要

参考情報

• andialbrecht/sqlparse security advisory · WEB
• andialbrecht/sqlparse commit 40ed3aa · WEB
• andialbrecht/sqlparse · PACKAGE
• andialbrecht/sqlparse release 0.5.4 · WEB

sqlparse のその他の脆弱性

• CVE-2026-84305中 5.1sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlformat --reindent rout…
• CVE-2026-71491高 8.7sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans …
• CVE-2026-59894中 6.2sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes b…
• CVE-2026-59893高 7.5sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sq…
• CVE-2026-54284高 8.7sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py r…