Approved changes feed: RSS · Atom
cpe:2.3:a:sqlparse_project:sqlparse:*:*:*:*:*:python:*:*part: a version: * update: *
| Vendor | Sqlparse Project (43e8fa36-ffb5-55a2-afc7-de403904e167) |
|---|---|
| Product | Sqlparse (ce0f6f0d-81e0-53fe-85e7-076dc2d89776) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | python |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/andialbrecht/sqlparse |
purl2cpe | 2026-06-01 10:14:48.493267 |
pkg:golang/github.com/andialbrecht/sqlparse |
purl2cpe | 2026-06-01 10:14:48.493269 |
pkg:pypi/sqlparse |
purl2cpe | 2026-06-01 10:14:48.493270 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-30608 |
vulnerable | 2026-06-08 06:04:39.927480 |
Parser contains an inefficient regular expression in sqlparse
MEDIUM (5.5)
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.
Published: 2023-04-18T21:32:11.145Z
Updated: 2025-11-03T21:48:07.853Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.