sqlparse: formatting list of tuples leads to denial of service

Mô tả

Tham khảo

• andialbrecht/sqlparse security advisory · WEB
• andialbrecht/sqlparse commit 40ed3aa · WEB
• andialbrecht/sqlparse · PACKAGE
• andialbrecht/sqlparse release 0.5.4 · WEB

Lỗ hổng khác của sqlparse

• CVE-2026-84305TRUNG BÌNH 5.1sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlformat --reindent rout…
• CVE-2026-71491CAO 8.7sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans …
• CVE-2026-59894TRUNG BÌNH 6.2sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes b…
• CVE-2026-59893CAO 7.5sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sq…
• CVE-2026-54284CAO 8.7sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py r…