Description (CNA)
Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before 0.5.0 |
CWE
CWE-674
References
- https://research.jfrog.com/vulnerabilities/sqlparse-stack-exhaustion-dos-jfsa-2024-001031292/
- https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03
- https://github.com/advisories/GHSA-2m57-hf25-phgg
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.