CVE-2026-112307 sqlparse through 0.6.0 PHP Code Injection via output_format='php'

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...

CVE-2026-112307

The sqlparse library (versions through 0.6.0 ) is vulnerable to a PHP code injection vulnerability when using output_format='php'. The root cause is the failure to escape dollar signs within SQL text, allowing attackers to embed ${expr} or {${expr}} sequences. These sequences are processed by the...

CVE-2026-112307 sqlparse through 0.6.0 PHP Code Injection via output_format='php'

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...