Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-59893: CWE-1333: Inefficient Regular Expression Complexity in andialbrecht sqlparseCVE-2026-59893
0

CVE-2026-59893 is a high severity vulnerability in the Python sqlparse module prior to version 0.6.0. It involves inefficient regular expression complexity causing quadratic CPU consumption when parsing certain SQL constructs such as unmatched dollar-quoted literals and multiline comments. This can lead to denial of service through excessive CPU usage during sqlparse.parse(), sqlparse.format(), and sqlparse.split() operations. The issue is fixed in version 0.6.0.

Join the discussion
CVE-2026-54284: CWE-407: Inefficient Algorithmic Complexity in andialbrecht sqlparseCVE-2026-54284
0

CVE-2026-54284 is a high severity vulnerability in the Python sqlparse module prior to version 0.6.0. The issue involves inefficient algorithmic complexity causing quadratic CPU consumption during token list construction and string conversion, which affects functions like sqlparse.parse(), sqlparse.format(), and sqlparse.split(). This inefficiency is triggered by repeatedly flattening nested token subtrees. The vulnerability is fixed in sqlparse version 0.6.0.

Join the discussion
CVE-2026-71491: CWE-400: Uncontrolled Resource Consumption in andialbrecht sqlparseCVE-2026-71491
0

CVE-2026-71491 is a high-severity vulnerability in the sqlparse Python module before version 0.6.0. The issue involves uncontrolled resource consumption due to repeated rescanning of comment-only SQL statements, leading to quadratic CPU usage when parsing or formatting SQL with comments stripped. This flaw is fixed in sqlparse version 0.6.0.

Join the discussion
CVE-2026-59894: CWE-94: Improper Control of Generation of Code ('Code Injection') in andialbrecht sqlparseCVE-2026-59894
0

A code injection vulnerability exists in the sqlparse Python module prior to version 0.6.0. The issue arises because the module fails to properly escape backslashes before quotes when formatting SQL with output_format set to 'python' or 'php'. This flaw allows crafted SQL input to terminate the generated string and inject arbitrary Python or PHP code if the generated source is executed or imported downstream. The vulnerability is fixed in sqlparse version 0.6.0.

Join the discussion

Showing 1 to 4 of 4 results

Filters:Package: pkg:pypi/sqlparse
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses