Asymmetric denial of service In sqlparse
Description
sqlparse: formatting list of tuples leads to denial of service
Summary
The below gist hangs while attempting to format a long list of tuples.
This was found while drafting a regression test for Dja ngo 5.2's composite primary key feature, which allows querying composite fields with tuples.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
pypi | 0.5.4 |
Aliases
1. 2.
References
1. 2. 3.