Lucene search

sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service

🗓️ 21 Apr 2023 20:21:24Reported by GitHub Advisory DatabaseType

SQL parser vulnerability patched in sqlparse 0.4.

Reporter	Title	Published	Views	Family All 40
Tenable Nessus	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : SQL parse vulnerability (USN-6064-1)	13 May 202300:00	–	nessus
Tenable Nessus	SUSE SLES15 : Recommended update for google-cloud SDK (SUSE-SU-SUSE-RU-2024:1637-3)	14 Sep 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for google-cloud SDK (SUSE-SU-SUSE-RU-2024:1637-1)	15 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-sqlparse (SUSE-SU-2023:2619-1)	26 Jun 202300:00	–	nessus
Tenable Nessus	Debian DLA-3425-1 : sqlparse - LTS security update	17 May 202300:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for google-cloud SDK (SUSE-SU-SUSE-RU-2024:1637-2)	21 Jun 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : python-sqlparse (SUSE-SU-2023:2462-1)	9 Jun 202300:00	–	nessus
Tenable Nessus	RHEL 8 : RHUI 4.5.0 - Security, Bug Fixes, and Enhancements (Moderate) (RHSA-2023:4591)	28 Apr 202400:00	–	nessus
Tenable Nessus	Rocky Linux 8 : Satellite 6.14 (RLSA-2023:6818)	11 Nov 202300:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.14 (RHSA-2023:6818)	29 Apr 202400:00	–	nessus

Vulners

Node

-sqlparseRange0.1.15–0.4.4

Source	Link
github	www.github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30608
github	www.github.com/andialbrecht/sqlparse/commit/c457abd5f097dd13fb21543381e7cfafe7d31cfb
github	www.github.com/andialbrecht/sqlparse/commit/e75e35869473832a1eb67772b1adfee2db11b85a
owasp	www.owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00017.html
github	www.github.com/pypa/advisory-database/tree/main/vulns/sqlparse/PYSEC-2023-87.yaml
github	www.github.com/advisories/GHSA-rrm6-wvj7-cwh2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Apr 2023 20:24Current

7.6High risk

Vulners AI Score7.6

EPSS0.001

CWE-1333