https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:07:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03345 bdu:2023-03345 https://cve.radiocsirt.org/vuln/bdu:2023-03345 https://cve.radiocsirt.org/vuln/brew-athenacli-cve-2023-30608 <p><strong>Affected:</strong> Homebrew: athenacli</p> <p>### Impact The SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).</p> <p>### Patches This issues has been fixed in sqlparse 0.4.4.</p> <p>### Workarounds None.</p> <p>### References This issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh). - Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a</p> <p><strong>Affected:</strong> Homebrew: athenacli</p> <p>### Impact The SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).</p> <p>### Patches This issues has been fixed in sqlparse 0.4.4.</p> <p>### Workarounds None.</p> <p>### References This issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh). - Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a</p> https://cve.radiocsirt.org/vuln/brew-athenacli-cve-2023-30608 https://cve.radiocsirt.org/vuln/euvd-2026-258411 EUVD-2026-258411 https://cve.radiocsirt.org/vuln/euvd-2026-258411 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30608 <p>sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p>sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-30608 https://cve.radiocsirt.org/vuln/ghsa-rrm6-wvj7-cwh2 <p><strong>Affected:</strong> PyPI: sqlparse</p> <p>### Impact The SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).</p> <p>### Patches This issues has been fixed in sqlparse 0.4.4.</p> <p>### Workarounds None.</p> <p>### References This issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh). - Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a</p> <p><strong>Affected:</strong> PyPI: sqlparse</p> <p>### Impact The SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).</p> <p>### Patches This issues has been fixed in sqlparse 0.4.4.</p> <p>### Workarounds None.</p> <p>### References This issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh). - Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a</p> https://cve.radiocsirt.org/vuln/ghsa-rrm6-wvj7-cwh2 https://cve.radiocsirt.org/vuln/gsd-2023-30608 gsd-2023-30608 https://cve.radiocsirt.org/vuln/gsd-2023-30608 https://cve.radiocsirt.org/vuln/oesa-2023-1279 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-sqlparse, openEuler:20.03-LTS-SP3: python-sqlparse, openEuler:22.03-LTS: python-sqlparse, openEuler:22.03-LTS-SP1: python-sqlparse</p> <p>sqlparse is a non-validating SQL parser module. It provides support for parsing, splitting and formatting SQL statements. Security Fix(es): sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue. (CVE-2023-30608)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-sqlparse, openEuler:20.03-LTS-SP3: python-sqlparse, openEuler:22.03-LTS: python-sqlparse, openEuler:22.03-LTS-SP1: python-sqlparse</p> <p>sqlparse is a non-validating SQL parser module. It provides support for parsing, splitting and formatting SQL statements. Security Fix(es): sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue. (CVE-2023-30608)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1279 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12957-1 <p>python310-sqlparse-0.4.4-1.1 on GA media</p> <p>python310-sqlparse-0.4.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12957-1 https://cve.radiocsirt.org/vuln/pysec-2023-87 <p><strong>Affected:</strong> PyPI: sqlparse</p> <p>sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> PyPI: sqlparse</p> <p>sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/pysec-2023-87 https://cve.radiocsirt.org/vuln/rhsa-2023:4591 <p>sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass of validation when uploading multiple files using one form field</p> <p>sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass of validation when uploading multiple files using one form field</p> https://cve.radiocsirt.org/vuln/rhsa-2023:4591 https://cve.radiocsirt.org/vuln/suse-ru-2024:1637-2 <p>Recommended update for google-cloud SDK</p> <p>Recommended update for google-cloud SDK</p> https://cve.radiocsirt.org/vuln/suse-ru-2024:1637-2 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-30608 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: sqlparse, Ubuntu:20.04:LTS: sqlparse, Ubuntu:22.04:LTS: sqlparse</p> <p>sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: sqlparse, Ubuntu:20.04:LTS: sqlparse, Ubuntu:22.04:LTS: sqlparse</p> <p>sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-30608 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2031 <p>Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2031