Medium
CVE-2026-84305
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filters
High
CVE-2026-54284
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
High
CVE-2026-59893
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
High
CVE-2026-71491
sqlparse: Quadratic O(n²) DoS in group_comments
Medium
CVE-2026-59894
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes
High
CVE-2024-4340
sqlparse parsing heavily nested list leads to Denial of Service
Medium
ghsa-27jp-wm6q-gp25
sqlparse: formatting list of tuples leads to denial of service
High
ghsa-p72q-h37j-3hq7
dbt uses a SQLparse version with a high vulnerability
Medium
CVE-2023-30608
sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service
High
CVE-2021-32839
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.