VulnerableCode Package Details - pkg:pypi/sqlparse@0.4.1

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/sqlparse@0.4.1

Essentials
History (2)

purl	pkg:pypi/sqlparse@0.4.1

Next non-vulnerable version	0.4.4
Latest non-vulnerable version	0.5.4
Risk

Vulnerabilities affecting this package (2)

Vulnerability	Summary	Fixed by
VCID-bh4x-5gt2-myah Aliases: CVE-2021-32839 GHSA-p5w8-wqhj-9hhf PYSEC-2021-333	denial of service	0.4.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-tcmp-pret-ekgr Aliases: CVE-2023-30608 GHSA-rrm6-wvj7-cwh2 PYSEC-2023-87	sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.	0.4.4 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-02T04:18:36.962243+00:00	Pypa Importer	Affected by	VCID-tcmp-pret-ekgr	https://github.com/pypa/advisory-database/blob/main/vulns/sqlparse/PYSEC-2023-87.yaml	38.6.0
2026-06-02T04:14:43.137391+00:00	Pypa Importer	Affected by	VCID-bh4x-5gt2-myah	https://github.com/pypa/advisory-database/blob/main/vulns/sqlparse/PYSEC-2021-333.yaml	38.6.0