sqlparse
Crates.io
Releases8
Frequency1 week 3 hours
Last Release
Downloads10.4K
A SQL Parser and Formatter for Rust
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| = *, >= 0.1.15, < 0.4.4 | 5.5 MEDIUM | — | ||
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue. | ||||