Aandialbrecht

Products

Exploited and recent CVEs

• CVE-2026-112307 High 7.3 sqlparse through 0.6.0 PHP Code Injection via output_format='php' 0.1%
• CVE-2026-84305 Medium 5.1 sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption 0.2%
• CVE-2026-54284 High 8.7 sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger 0.3%
• CVE-2026-59893 High 7.5 sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service) 0.3%
• CVE-2026-71491 High 8.7 sqlparse: Quadratic O(n²) DoS in group_comments 0.3%
• CVE-2026-59894 Medium 6.2 sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes 0.1%
• CVE-2023-30608 Medium 5.5 Parser contains an inefficient regular expression in sqlparse 1.0%
• CVE-2021-32839 High 7.5 Regular Expression Denial of Service in sqlparse 2.3%