Skip to content
Andialbrecht vulnerabilities
Newest
-
andialbrecht sqlparse
sqlparse through 0.6.0 PHP Code Injection via output_format='php'
CVE-2026-112307
Fix available
8.4 High
-
andialbrecht sqlparse
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
CVE-2026-84305
Fix available
5.1 Medium
-
andialbrecht sqlparse
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
CVE-2026-54284
Fix available
8.7 High
-
andialbrecht sqlparse
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
CVE-2026-59893
Fix available
7.5 High
-
andialbrecht sqlparse
sqlparse: Quadratic O(n²) DoS in group_comments
CVE-2026-71491
Fix available
8.7 High
-
andialbrecht sqlparse
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes
CVE-2026-59894
Fix available
6.2 Medium
-
andialbrecht sqlparse, debian linux +1 more
Parser contains an inefficient regular expression in sqlparse
CVE-2023-30608
Fix available
5.5 Medium
-
andialbrecht sqlparse
Regular Expression Denial of Service in sqlparse
CVE-2021-32839
Fix available
7.5 High