OESA-2024-1646 python-sqlparse security update

🗓️ 24 May 2024 11:07:06Reported by GoogleType

sqlparse is a non-validating SQL parser module. It provides support for parsing, splitting and formatting SQL statements. Security Fix(es): Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. (CVE-...

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to sqlparse-0.4.4-py3-none-any.whl CVE-2024-4340	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in sqlparse affects IBM Process Mining CVE-2024-4340	28 Jun 202415:17	–	ibm
IBM Security Bulletins	Security Bulletin: Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.	27 Sep 202503:16	–	ibm
IBM Security Bulletins	Security Bulletin: sqlparse Vulnerability Affects IBM Data Observability by Databand Self-Hosted (CVE-2024-4340)	28 Jan 202522:08	–	ibm
BDU FSTEC	sqlparse Heap Buffer Overflow DoS	3 Feb 202500:00	–	bdu_fstec
Chainguard	CVE-2024-4340 vulnerabilities	30 Apr 202415:15	–	cgr
Circl	CVE-2024-4340	15 Apr 202420:21	–	circl
CNNVD	sqlparse 安全漏洞	30 Apr 202400:00	–	cnnvd
CVE	CVE-2024-4340	30 Apr 202414:23	–	cve
Cvelist	CVE-2024-4340 Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.	30 Apr 202414:23	–	cvelist

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-4340

18 Aug 2026 01:17Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.03237