Описание
sqlparse: formatting list of tuples leads to denial of service
Summary
The below gist hangs while attempting to format a long list of tuples.
This was found while drafting a regression test for Dja ngo 5.2's composite primary key feature, which allows querying composite fields with tuples.
Пакеты
Наименование
sqlparse
pip
Затронутые версииВерсия исправления
<= 0.5.3
0.5.4
6.9 Medium
CVSS4
Дефекты
CWE-770
6.9 Medium
CVSS4
Дефекты
CWE-770