Security Advisory

CVE-2026-59893

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-17 17:41:36

Last updated 2026-08-17 18:54:26

Assigner GitHub_M

CVSS score 7.5

State PUBLISHED

Description

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split(). This issue is fixed in version 0.6.0.

← Browse all CVEs View on cve.org ↗