logo

Database

Asymmetric denial of service In sqlparse

Description

sqlparse: formatting list of tuples leads to denial of service

Summary

The below gist hangs while attempting to format a long list of tuples.

This was found while drafting a regression test for Dja ngo 5.2's composite primary key feature, which allows querying composite fields with tuples.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions
FLAT-VXLS5 – Vulnerability | Fluid Attacks Database