Debian dla-3425 : pypy-sqlparse - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3425 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3425-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3425-1] sqlparse security update

Debian LTS Advisory DLA-3425-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 16, 2023 https://wiki.debian.org/LTS Package : sqlparse Version : 0.2.4-1+deb10u1 CVE ID : CVE-2023-30608 Debian Bug : 1034615 Erik Krogh Kristensen discovered that sqlparse, a...

DLA-3425-1 sqlparse - security update

Bulletin has no description...

OESA-2023-1279 python-sqlparse security update

sqlparse is a non-validating SQL parser module. It provides support for parsing, splitting and formatting SQL statements. Security Fixes: sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regula...

Ubuntu: Security Advisory (USN-6064-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6064-1 sqlparse vulnerability

It was discovered that SQL parse incorrectly handled certain regular expression. An attacker could possibly use this issue to cause a denial of service...

Regular Expression Denial Of Service (ReDoS)

sqlparse is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the lexer.py regex element which allows an attacker to crash the application by submitting maliciously crafted input...

GHSA-RRM6-WVJ7-CWH2 sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service

Impact The SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. The vulnerability may lead to Denial of Service DoS. Patches This issues has been fixed in sqlparse 0.4.4. Workarounds None. References This issue was discovered and reported by...

sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service

Impact The SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. The vulnerability may lead to Denial of Service DoS. Patches This issues has been fixed in sqlparse 0.4.4. Workarounds None. References This issue was discovered and reported by...

agnostic (=1.0.3), airflow-dbt-python (>=0.2.0 <=0.14.3) +264 more potentially affected by CVE-2023-30608 via sqlparse (>=0.2.1 <=0.4.3)

sqlparse PYPI version =0.2.1, =0.2.0, =0.8.0, =1.0.0, =0.1.1, =0.7.11, =0.1.0, =0.1.2, =0.0.44, =0.1.0, =0.1.0, =0.5.1 and more Source cves: CVE-2023-30608 Source advisory: OSV:GHSA-RRM6-WVJ7-CWH2...

SUSE CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

DEBIAN-CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

PYSEC-2023-87

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

agnostic (=1.0.3), airflow-dbt-python (>=0.2.0 <=0.14.3) +264 more potentially affected by CVE-2023-30608 via sqlparse (>=0.2.1 <=0.4.3)

sqlparse PYPI version =0.2.1, =0.2.0, =0.8.0, =1.0.0, =0.1.1, =0.7.11, =0.1.0, =0.1.2, =0.0.44, =0.1.0, =0.1.0, =0.5.1 and more Source cves: CVE-2023-30608 Source advisory: OSV:PYSEC-2023-87...

Design/Logic Flaw

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

UBUNTU-CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

CVE-2023-30608 Parser contains an inefficient regular expression in sqlparse

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

PT-2023-3225 · Pypi +6 · Sqlparse +6

Name of the Vulnerable Software and Affected Versions: sqlparse versions prior to 0.4.4 Description: The SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue may lead to Denial of Service DoS. The vulnerability was introduced by...