Sqlparse (Andialbrecht) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-01. Vendor: Andialbrecht.

CVEs of Sqlparse

• CVE-2026-84305 - CVSS 5.1 (medium), 2026-09-01: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlformat --reindent route…
• CVE-2026-54284 - CVSS 8.7 (high), 2026-08-17: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten…
• CVE-2026-59893 - CVSS 7.5 (high), 2026-08-17: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py…
• CVE-2026-71491 - CVSS 8.7 (high), 2026-08-17: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-only…
• CVE-2026-59894 - CVSS 6.2 (medium), 2026-08-17: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes before quotes in…
• CVE-2023-30608 - CVSS 7.5 (high), 2023-04-18: sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS…
• CVE-2021-32839 - CVSS 7.5 (high), 2021-09-20: sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse…