PyPI/sqlparse CVE-2026-84305: medium 5.1, EPSS 0.19%
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
Action: Upgrade sqlparse to 0.6.0 or later.
pip install sqlparse==0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-cfqr-cjx5-5jcm
- nvd: CVE-2026-84305
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-cfqr-cjx5-5jcm
- https://github.com/andialbrecht/sqlparse/commit/a51df6d9e2d31b44be9adb6bc8732517db6bf96b
- https://github.com/andialbrecht/sqlparse
- https://github.com/andialbrecht/sqlparse/releases/tag/0.6.0
CVE-2026-84305 · published · modified · JSON