GHSL-2021-107: ReDoS (Regular Expression Denial of Service) in python-sqlparse - CVE-2021-32839
python-sqlparse contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service).
Affected Software
Event History
Frequently Asked Questions
What is the severity of GHSL-2021-107?
The severity of GHSL-2021-107 is classified as moderate due to its potential for causing Denial of Service.
How do I fix GHSL-2021-107?
To fix GHSL-2021-107, you should update the python-sqlparse library to the latest version that has patched the vulnerable regular expression.
What is the impact of GHSL-2021-107?
The impact of GHSL-2021-107 is that an attacker can exploit the vulnerability to cause a denial of service by supplying crafted input to the vulnerable regex.
Which versions of python-sqlparse are affected by GHSL-2021-107?
GHSL-2021-107 affects various versions of python-sqlparse prior to the fix introduced in the most recent release.
Is there a workaround for GHSL-2021-107?
A potential workaround for GHSL-2021-107 is to avoid using the specific functions of python-sqlparse that utilize the vulnerable regular expression until an update can be applied.