CVE-2026-84305: falha de média gravidade em andialbrecht sqlparse
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.2%
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter._get_offset() in sqlparse/filters/reindent.py, where _flatten_up_to_token() repeatedly rebuilds and joins the statement prefix. Thousands of offset calculations walk an expanding token tree, producing quadratic CPU consumption for inputs that remain below MAX_GROUPING_TOKENS and causing request delays, reduced throughput, or worker starvation. This issue is fixed in version 0.6.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
andialbrecht · sqlparseCVEs relacionadas — andialbrecht sqlparse
No mesmo produto, das mais perigosas para as menos.
CVE-2021-32839HIGHRegular Expression Denial of Service in sqlparseEPSS 2.3%CVE-2023-30608MEDIUMParser contains an inefficient regular expression in sqlparseEPSS 1.0%CVE-2026-59893HIGHsqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)EPSS 0.3%CVE-2026-54284HIGHsqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps triggerEPSS 0.3%CVE-2026-71491HIGHsqlparse: Quadratic O(n²) DoS in group_commentsEPSS 0.3%CVE-2026-112307HIGHsqlparse through 0.6.0 PHP Code Injection via output_format='php'EPSS 0.1%