Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by group_parenthesis and group_case, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split() before depth and token limits terminate processing. This issue is fixed in version 0.6.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 sqlparse, CPU Denial of Service (DoS), #CVE-2026-54284 (High) -DC-Aug2026-1559 https://dailycve.com/sqlparse-cpu-denial-of-service-dos-cve-2026-54284-high-dc-aug2026-1559/
Post summary
The post announces a new high‑severity CVE-2026-54284 affecting sqlparse that causes a CPU denial‑of‑service; it provides basic vulnerability details but no PoC, exploit code, patch information, or active exploitation evidence.