Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/sqlparse@0.4.2-1%2Bdeb12u1
purl pkg:deb/debian/sqlparse@0.4.2-1%2Bdeb12u1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-6jpc-dsrp-6qdg sqlparse parsing heavily nested list leads to Denial of Service Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. CVE-2024-4340
GHSA-2m57-hf25-phgg
VCID-bh4x-5gt2-myah denial of service CVE-2021-32839
GHSA-p5w8-wqhj-9hhf
PYSEC-2021-333
VCID-tcmp-pret-ekgr sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue. CVE-2023-30608
GHSA-rrm6-wvj7-cwh2
PYSEC-2023-87

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T09:11:30.083483+00:00 Debian Oval Importer Fixing VCID-6jpc-dsrp-6qdg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T05:37:24.954508+00:00 Debian Oval Importer Fixing VCID-bh4x-5gt2-myah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T04:12:21.690203+00:00 Debian Oval Importer Fixing VCID-tcmp-pret-ekgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0