THREATOPS
THREAT OPS › Threat News › [GHSA] GHSA-f2ff-p2ww-7p4p (high) — sqlparse: Quadratic O(n²) DoS in group_comments

[GHSA] GHSA-f2ff-p2ww-7p4p (high) — sqlparse: Quadratic O(n²) DoS in group_comments

highgithub_advisoriesPublished 2026-08-17

GHSA-f2ff-p2ww-7p4p Severity: high CVE: CVE-2026-71491

sqlparse: Quadratic O(n²) DoS in group_comments

### Summary A comment-only statement (`-- c\n`*n) may cause a Denial of Service (DoS).

### Details Location: sqlparse/engine/grouping.py:331-341 (`group_comments`), invoke

Indicators of compromise

Original source: https://github.com/advisories/GHSA-f2ff-p2ww-7p4p