THREAT OPS › Threat News › [GHSA] GHSA-prg7-hcfm-mfcr (high) — sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
[GHSA] GHSA-prg7-hcfm-mfcr (high) — sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
GHSA-prg7-hcfm-mfcr Severity: high CVE: CVE-2026-59893
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
### Summary
sqlparse contains a Regular Expression Denial of Service (ReDoS) vulnerability in its dollar-quoted SQL literal lexer. The regex pattern at `sqlparse/keywords.py:33` uses a backreference (`\1`) to match closing dollar-quote deli
Indicators of compromise
- CVE-2026-59893cve
Original source: https://github.com/advisories/GHSA-prg7-hcfm-mfcr