The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade rubygem-gssapiUpgrade satellite-cloneUpgrade rubygem-highlineUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-foreman_maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-oauth-ttyUpgrade rubygem-http-cookieUpgrade rubygem-unfUpgrade rubygem-domain_nameUpgrade rubygem-hashieUpgrade rubygem-oauthUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-little-pluggerUpgrade rubygem-unf_extUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-fast_gettextUpgrade rubygem-version_gemUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debuginfoUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debugsourceUpgrade rubygem-ffi-debugsourceUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-maintainUpgrade rubygem-snaky_hashUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-unicode-debuginfo | Nov 13, 2023 | Apr 18, 2023 |
| Debian | — | Upgrade sqlparse | May 18, 2023 | Apr 18, 2023 |
| Redhat_linux | — | Upgrade rubygem-domain_nameUpgrade rubygem-multi_jsonUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-apipie-bindingsUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debugsourceUpgrade python39-pulp_manifestUpgrade rubygem-unfUpgrade satellite-cliUpgrade rubygem-mime-typesUpgrade satellite-maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-http-cookieUpgrade rubygem-unicode-display_widthUpgrade rubygem-powerbarUpgrade rubygem-loggingUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauth-ttyUpgrade rubygem-unicode-debugsourceUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_printUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade rubygem-snaky_hashUpgrade rubygem-unicodeUpgrade rubygem-fast_gettextUpgrade rubygem-highlineUpgrade rubygem-ffi-debugsourceUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-ffi-debuginfoUpgrade foreman-cliUpgrade rubygem-oauth | Nov 13, 2023 | Apr 18, 2023 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsource | Mar 5, 2024 | Apr 18, 2023 |
| Suse | — | Upgrade python3-sqlparseUpgrade python311-sqlparse | Jun 9, 2023 | Apr 18, 2023 |
| Ubuntu | — | Upgrade python-sqlparseUpgrade python3-sqlparse | May 11, 2023 | Apr 18, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub