USN-8808-1: sqlparse Ubuntu
CVSS: UnknownPublished
Published 23-09-2026Last modified 24-09-2026
Vulnerability summary
USN-8808-1 is a vulnerability in sqlparse Ubuntu with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 23-09-2026PublishedVulnerability first disclosed.
- 24-09-2026Last modifiedVulnerability information updated.
Description
sqlparse vulnerabilities It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resulting in a denial of service.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- sqlparse< 0.1.18-1ubuntu0.1~esm1 | < 0.2.4-0.1ubuntu0.1+esm1 | < 0.2.4-3ubuntu0.1+esm1 | < 0.4.2-1ubuntu0.22.04.3 | < 0.4.4-1ubuntu0.2 | < 0.5.4-1ubuntu0.1
1 vendor · 1 product