23 matches found
sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in comment grouping
A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the groupcomments function to repeatedly rescan these statements, leading to...
8.7CVSS5.9AI score0.00263EPSS
SaveExploits0References6
20