sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split(). This issue is fixed in version 0.6.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade python3.12-gitpythonUpgrade receptor-debuginfoUpgrade automation-gateway-serverUpgrade python3.12-django-ansible-baseUpgrade automation-eda-controllerUpgrade python3-sqlparseUpgrade automation-gateway-proxy-serverUpgrade python3.12-django-ansible-base+redis_clientUpgrade python3.12-django-ansible-base+api_documentationUpgrade receptor-debugsourceUpgrade automation-eda-controller-baseUpgrade python3.12-django-ansible-base+authenticationUpgrade aap-metrics-utilityUpgrade automation-gateway-configUpgrade python3.12-django-ansible-base+rbacUpgrade python3.12-django-ansible-base+channel_authUpgrade receptorUpgrade automation-platform-uiUpgrade automation-eda-controller-worker-servicesUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade python3.12-django-ansible-base+feature_flagsUpgrade automation-controller-uiUpgrade automation-eda-controller-base-servicesUpgrade receptorctlUpgrade python3.12-django-ansible-base+activitystreamUpgrade automation-gateway-proxy-debugsourceUpgrade automation-gateway-proxyUpgrade python3.12-galaxy-ngUpgrade automation-controller-venv-towerUpgrade automation-hubUpgrade automation-eda-controller-event-stream-servicesUpgrade automation-gateway-proxy-server-debuginfoUpgrade python3.12-django-ansible-base+resource_registryUpgrade python3.12-sqlparseUpgrade automation-controller-serverUpgrade automation-controller-cliUpgrade automation-controllerUpgrade automation-gatewayUpgrade python3.12-django-ansible-base+rest_filters | Sep 25, 2026 | Aug 17, 2026 |
| Ubuntu | — | Upgrade python-sqlparse (Ubuntu Pro)Upgrade python3-sqlparseUpgrade pypy-sqlparse (Ubuntu Pro)Upgrade python3-sqlparse (Ubuntu Pro) | Sep 24, 2026 | Sep 23, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub