Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-17T17:41:36 sqlparse: sqlparse: Denial of Service via inefficient SQL parsing 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-1333

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split(). This issue is fixed in version 0.6.0.

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input. This flaw causes inefficient processing of certain SQL patterns, leading to excessive CPU consumption and potentially a Denial of Service (DoS) condition, making the application unresponsive.

Red Hat Discovery 2 2026-08-31T00:00:00Z RHSA-2026:61783 discovery/discovery-server-rhel9:1788205779 Red Hat Ansible Automation Platform 2 Will not fix ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-24/eda-controller-rhel8 Red Hat Ansible Automation Platform 2 Will not fix ansible-automation-platform-24/hub-rhel8 Red Hat Ansible Automation Platform 2 Will not fix ansible-automation-platform-24/lightspeed-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/ansible-dev-tools-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/controller-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/eda-controller-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/gateway-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/hub-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/lightspeed-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/ansible-dev-tools-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/controller-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/eda-controller-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/gateway-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/hub-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/lightspeed-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/aap-cloud-billing-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/ansible-dev-tools-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/controller-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/eda-controller-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/gateway-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/hub-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/lightspeed-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/metrics-service-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform/automation-dashboard-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-tech-preview/metrics-service-rhel9 Red Hat Ansible Automation Platform 2 Not affected python3.11-sqlparse Red Hat Ansible Automation Platform 2 Affected python3.12-sqlparse Red Hat Ansible Automation Platform 2 Not affected python3x-sqlparse Red Hat Ansible Automation Platform 2 Affected python-sqlparse Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th06-cpu-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th06-cuda130-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th06-rocm64-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th-torch-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th-torch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-th-torch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-training-cuda128-torch29-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-ironic-rhel9 Red Hat OpenShift Container Platform 4 Affected python-sqlparse Red Hat OpenStack Platform 16.2 Affected python-sqlparse Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-aodh-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-aodh-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-aodh-evaluator Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-aodh-listener Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-aodh-notifier Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-barbican-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-barbican-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-barbican-keystone-listener Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-barbican-worker Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ceilometer-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ceilometer-central Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ceilometer-compute Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ceilometer-ipmi Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ceilometer-notification Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-cinder-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-cinder-backup Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-cinder-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-cinder-scheduler Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-cinder-volume Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-backend-bind9 Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-central Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-mdns Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-producer Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-sink Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-designate-worker Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ec2-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-glance-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-gnocchi-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-gnocchi-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-gnocchi-metricd Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-gnocchi-statsd Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-heat-all Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-heat-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-heat-api-cfn Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-heat-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-heat-engine Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ironic-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ironic-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ironic-conductor Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ironic-inspector Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ironic-neutron-agent Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-ironic-pxe Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-keystone Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-manila-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-manila-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-manila-scheduler Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-manila-share Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-mistral-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-mistral-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-mistral-engine Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-mistral-event-engine Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-mistral-executor Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-agent-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-dhcp-agent Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-l3-agent Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-metadata-agent Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-metadata-agent-ovn Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-openvswitch-agent Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-server Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-server-ovn Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-neutron-sriov-agent Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-compute Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-compute-ironic Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-conductor Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-libvirt Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-novncproxy Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-nova-scheduler Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-octavia-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-octavia-base Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-octavia-health-manager Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-octavia-housekeeping Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-octavia-worker Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-panko-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-placement-api Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-tempest Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-tripleoclient Red Hat OpenStack Platform 16.2 Affected rhosp-rhel8/openstack-zaqar-wsgi Red Hat OpenStack Platform 17.1 Affected python-sqlparse Red Hat OpenStack Platform 18.0 Affected python-sqlparse Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-aodh-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-aodh-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-aodh-evaluator-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-aodh-listener-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-aodh-notifier-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-barbican-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-barbican-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-barbican-keystone-listener-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-barbican-worker-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cinder-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cinder-backup-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cinder-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cinder-scheduler-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cinder-volume-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cloudkitty-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cloudkitty-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-cloudkitty-processor-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-backend-bind9-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-central-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-mdns-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-producer-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-sink-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-designate-worker-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-glance-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-heat-api-cfn-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-heat-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-heat-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-heat-engine-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-horizon-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-ironic-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-ironic-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-ironic-conductor-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-ironic-inspector-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-ironic-neutron-agent-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-ironic-pxe-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-keystone-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-manila-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-manila-scheduler-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-manila-share-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-neutron-agent-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-neutron-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-neutron-dhcp-agent-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-neutron-metadata-agent-ovn-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-neutron-ovn-agent-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-neutron-server-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-neutron-sriov-agent-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-nova-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-nova-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-nova-compute-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-nova-conductor-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-nova-novncproxy-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-nova-scheduler-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-octavia-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-octavia-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-octavia-health-manager-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-octavia-housekeeping-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-octavia-worker-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-ovn-bgp-agent-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-placement-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-tempest-all-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-watcher-api-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-watcher-applier-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-watcher-base-rhel9 Red Hat OpenStack Platform 18.0 Affected rhoso/openstack-watcher-decision-engine-rhel9 Red Hat Satellite 6 Affected python3.12-sqlparse Red Hat Satellite 6 Affected python-sqlparse Red Hat Satellite 6 Affected satellite/iop-advisor-backend-rhel9 Red Hat Satellite 6 Not affected tfm-pulpcore-python-sqlparse Red Hat Update Infrastructure 4 for Cloud Providers Will not fix python-sqlparse Red Hat Update Infrastructure 5 Affected rhui5/rhua-rhel9 Red Hat Update Infrastructure 5 Not affected rhui5/rhua-tp-rhel9 Self-service automation portal 2 Affected ansible-automation-platform/bootc-automation-portal-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-59893 https://nvd.nist.gov/vuln/detail/CVE-2026-59893 https://github.com/andialbrecht/sqlparse/commit/d1d80602741f77ec78e5a04ce4719244cf32352e https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr