Andialbrecht Sqlparse vulnerabilities

• andialbrecht sqlparse sqlparse through 0.6.0 PHP Code Injection via output_format='php' CVE-2026-112307 Fix available 8.4 HighOctober 19, 2026
• andialbrecht sqlparse sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption CVE-2026-84305 Fix available 5.1 MediumSeptember 1, 2026
• andialbrecht sqlparse sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger CVE-2026-54284 Fix available 8.7 HighAugust 17, 2026
• andialbrecht sqlparse sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service) CVE-2026-59893 Fix available 7.5 HighAugust 17, 2026
• andialbrecht sqlparse sqlparse: Quadratic O(n²) DoS in group_comments CVE-2026-71491 Fix available 8.7 HighAugust 17, 2026
• andialbrecht sqlparse sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes CVE-2026-59894 Fix available 6.2 MediumAugust 17, 2026
• andialbrecht sqlparse, debian linux +1 more Parser contains an inefficient regular expression in sqlparse CVE-2023-30608 Fix available 5.5 MediumApril 18, 2023
• andialbrecht sqlparse Regular Expression Denial of Service in sqlparse CVE-2021-32839 Fix available 7.5 HighSeptember 10, 2021