GHSL-2021-107: ReDoS (Regular Expression Denial of Service) in python-sqlparse - CVE-2021-32839
python-sqlparse contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service).
python-sqlparse contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service).
The severity of GHSL-2021-107 is classified as moderate due to its potential for causing Denial of Service.
To fix GHSL-2021-107, you should update the python-sqlparse library to the latest version that has patched the vulnerable regular expression.
The impact of GHSL-2021-107 is that an attacker can exploit the vulnerability to cause a denial of service by supplying crafted input to the vulnerable regex.
GHSL-2021-107 affects various versions of python-sqlparse prior to the fix introduced in the most recent release.
A potential workaround for GHSL-2021-107 is to avoid using the specific functions of python-sqlparse that utilize the vulnerable regular expression until an update can be applied.