Red Hat Security Advisory

RHSA-2024:9986

RHOSP 17.1.4 (python-sqlparse) security update

Released 2024-11-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 17.1 python-sqlparse-0.4.1-2.el8ost, python3-sqlparse-0.4.1-2.el8ost

TI-2024-04042 CVE-2024-4340 · GHSA-2m57-hf25-phgg

HIGH 72

Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03237 Published 2024-04-30 Partial fix · 0.5.0 CWE-674