Uncontrolled Recursion
CVE-2024-4340
Summary
The package sqlparse versions prior to 0.5.0 are vulnerable to Denial of Service (DoS). This vulnerability occurs when a heavily nested list is passed to the function "sqlparse.parse()", resulting in a RecursionError.
- LOW
- NETWORK
- NONE
- UNCHANGED
- NONE
- NONE
- NONE
- HIGH
CWE-674 - Uncontrolled Recursion
The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.
References
Advisory Timeline
- Published