PT-2026-80669

Summary sqlparse contains a Regular Expression Denial of Service ReDoS vulnerability in its dollar-quoted SQL literal lexer. The regex pattern at sqlparse/keywords.py:33 uses a backreference 1 to match closing dollar-quote delimiters, causing On² CPU complexity when processing inputs containing...

Server-Side Template Injection (SSTI)

pwntools is vulnerable to server-side template injection. An attacker is able to inject and execute arbitrary code via the Shellcraft generation due to insecure parsing of strings that containing end of multiline comment...