CVE-2024-4340
2 advisories.
PyPI/sqlparse CVE-2024-4340: high 7.5
sqlparse parsing heavily nested list leads to Denial of Service
Action: Upgrade sqlparse to 0.5.0 or later.
pip install sqlparse==0.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0 | - |
Fixed versions
| 0.5.0 |
Sources
- osv: GHSA-2m57-hf25-phgg
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-2m57-hf25-phgg
- https://nvd.nist.gov/vuln/detail/CVE-2024-4340
- https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03
- https://github.com/andialbrecht/sqlparse
- https://research.jfrog.com/vulnerabilities/sqlparse-stack-exhaustion-dos-jfsa-2024-001031292
CVE-2024-4340 · published · modified · JSON
PyPI/sqlparse CVE-2024-4340: high 7.5
sqlparse parsing heavily nested list leads to Denial of Service
Action: Upgrade sqlparse to 0.5.0 or later.
pip install sqlparse==0.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0 | - |
Fixed versions
| 0.5.0 |
Sources
- osv: PYSEC-2026-1940
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-2m57-hf25-phgg
- https://nvd.nist.gov/vuln/detail/CVE-2024-4340
- https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03
- https://github.com/andialbrecht/sqlparse
- https://research.jfrog.com/vulnerabilities/sqlparse-stack-exhaustion-dos-jfsa-2024-001031292
- https://pypi.org/project/sqlparse
- https://github.com/advisories/GHSA-2m57-hf25-phgg
CVE-2024-4340 · published · modified · JSON