Known vulnerabilities in Sqlparse

Vendor: Sqlparse Project
Software: Sqlparse
Software CPE: cpe:2.3:a:sqlparse_project:sqlparse:*:*:*:*:*:*:*:*
Website: https://github.com/andialbrecht/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sqlparse Sqlparse is affected by 11 known vulnerabilities: 1 high, 9 medium, 1 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142416 - Inefficient Algorithmic Complexity
CVE-2026-54284		 CWE-407 Medium
No
No
 0.6.0 13.08.2026 SB2026081381
#VU142415 - Inefficient Regular Expression Complexity
CVE-2026-59893		 CWE-1333 Medium
No
No
 0.6.0 13.08.2026 SB2026081381
#VU142414 - Resource exhaustion
 CWE-400 Low
No
No
 0.6.0 13.08.2026 SB2026081381
#VU142413 - Resource exhaustion
CVE-2026-71491		 CWE-400 Medium
No
No
 0.6.0 13.08.2026 SB2026081381
#VU142412 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59894		 CWE-94 High
No
No
 0.6.0 13.08.2026 SB2026081381
#VU118840 - Improper input validation
 CWE-20 Medium
No
No
 0.5.4 28.11.2025 SB2025112863
#VU89381 - Uncontrolled Recursion
CVE-2024-4340		 CWE-674 Medium
No
No
 0.5.0 13.05.2024 SB2024051329
SB2024051330
SB2024051352
and 15 more
#VU142411 - Resource exhaustion
 CWE-400 Medium
No
No
 0.5.0 13.04.2024 SB2024051329
#VU75412 - Resource exhaustion
CVE-2023-30608		 CWE-400 Medium
No
No
 0.4.4 21.04.2023 SB2023042135
SB2023051047
SB2023060826
and 13 more
#VU75325 - Incorrect Regular Expression
 CWE-185 Medium
No
No
 0.4.4 19.04.2023 SB2023041915
#VU142410 - Inefficient Regular Expression Complexity
CVE-2021-32839		 CWE-1333 Medium
No
No
 0.4.2 10.09.2021 SB2021091021