PyPI/sqlparse: medium
sqlparse: formatting list of tuples leads to denial of service
Action: Upgrade sqlparse to 0.5.4 or later.
pip install sqlparse==0.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.4 | - |
Fixed versions
| 0.5.4 |
Sources
- osv: GHSA-27jp-wm6q-gp25
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-27jp-wm6q-gp25
- https://github.com/andialbrecht/sqlparse/commit/40ed3aa958657fa4a82055927fa9de70ab903360
- https://github.com/andialbrecht/sqlparse
- https://github.com/andialbrecht/sqlparse/releases/tag/0.5.4
published · modified · JSON