237 matches found
pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass
CVE-2026-17351 — Bypass de solo lectura del Asistente de IA de pgAdmin 4 mediante diferencia de lexer PoC para CVE-2026-17351, un bypass crítico CVSS 9.0 de inyección SQL en el Asistente de IA de pgAdmin 4. Resumen de la vulnerabilidad Las versiones de pgAdmin 4 desde la 9.13 hasta la 9.16 utiliz...
openSUSE 16 Security Update : python-sqlparse (openSUSE-SU-2026:21777-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21777-1 advisory. This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption...
Linux Distros Unpatched Vulnerability : CVE-2026-84305
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled...
CVE-2026-84305
sqlparse is a non-validating SQL parser module for Python. Prior to 0...
UBUNTU-CVE-2026-84305
sqlparse is a non-validating SQL parser module for Python. Prior to 0...
CVE-2026-84305
creationtimestamp| type| source ---|---|--- 2026-09-01 22:35:02+00:00| published-proof-of-concept| https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-cfqr-cjx5-5jcm 2026-09-02 06:32:30+00:00| seen| https://gist.github.com/alon710/342832b227e98d6656ed29633e96b4ab...
GHSA-CFQR-CJX5-5JCM sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
Summary When SQL is formatted with reindentation enabled, ReindentFilter repeatedly rebuilds prefixes of the current statement to calculate token offsets. An attacker who controls SQL sent to this opt-in formatting path can supply a parenthesized tuple list that remains just below the...
Inefficient Algorithmic Complexity
Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via ReindentFilter.getoffset in sqlparse/filters/reindent.py, which reconstructed the full statement prefix from the beginning of the statement on every call. Because getoffset is invoked once per grou...
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
Summary When SQL is formatted with reindentation enabled, ReindentFilter repeatedly rebuilds prefixes of the current statement to calculate token offsets. An attacker who controls SQL sent to this opt-in formatting path can supply a parenthesized tuple list that remains just below the...
CVE-2026-84305
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...
EUVD-2026-69421
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...
CVE-2026-84305
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...
CVE-2026-84305 sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...
CVE-2026-84305
sqlparse , a non-validating SQL parser for Python, is vulnerable to quadratic CPU consumption in versions prior to 0.6.0. When processing attacker-controlled parenthesized tuple lists via sqlparse.format(sql, reindent=True) or sqlformat --reindent, the ReindentFilter._get_offset() function in sql...
CVE-2026-84305 sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...
openSUSE 16 Security Update : python-sqlparse (openSUSE-SU-2026:21690-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21690-1 advisory. - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessiv...
ROOT-APP-PYPI-CVE-2026-71491 CVE-2026-71491 in sqlparse - Patched by Root
Root has patched CVE-2026-71491 in the sqlparse package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-27JP-WM6Q-GP25 GHSA-27jp-wm6q-gp25 in sqlparse - Patched by Root
Root has patched GHSA-27jp-wm6q-gp25 in the sqlparse package for Root:PyPI. Multiple fixed versions available...