All 6 CVE vulnerabilities found in sqlparse, with AI-generated Chinese analysis, references, and POCs.
Vendor: andialbrecht
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54284 | sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger CWE-407 | 8.7 | High | 2026-08-17 |
| CVE-2026-59893 | sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service) CWE-1333 | 7.5 | High | 2026-08-17 |
| CVE-2026-71491 | sqlparse: Quadratic O(n²) DoS in group_comments CWE-400 | 8.7 | High | 2026-08-17 |
| CVE-2026-59894 | sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes CWE-94 | 6.2 | Medium | 2026-08-17 |
| CVE-2023-30608 | Parser contains an inefficient regular expression in sqlparse CWE-1333 | 5.5 | Medium | 2023-04-18 |
| CVE-2021-32839 | Regular Expression Denial of Service in sqlparse CWE-400 | 7.5 | High | 2021-09-20 |
All 6 known CVE vulnerabilities affecting sqlparse with full Chinese analysis, references, and POCs where available.