Sqlparse (Sqlparse Project) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 34 known versions, newest CVE from 2026-10-19. Vendor: Sqlparse Project.

CVEs of Sqlparse

• CVE-2026-112307 - CVSS 8.4 (high), 2026-10-19: sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped…
• CVE-2024-4340 - CVSS 7.5 (high), 2024-04-30: Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.
• CVE-2023-30608 - CVSS 7.5 (high), 2023-04-18: sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS…
• CVE-2021-32839 - CVSS 7.5 (high), 2021-09-20: sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse…