What is CVE-2026-59893?
CVE-2026-59893 is a ReDoS vulnerability in the sqlparse library where crafted SQL queries cause excessive CPU consumption via dollar-quoted literals and multi-line comments in `sqlparse.parse()`. It affects applications using sqlparse versions prior to 0.6.0, and upgrading to the patched version is recommended.
Azərbaycanca: CVE-2026-59893 sqlparse kitabxanasında xüsusi hazırlanmış SQL sorğuları vasitəsilə yüksək CPU istehlakına səbəb olan ReDoS zəifliyidir. Bu, xüsusilə dollar-dırnaq (dollar-quoted) literallar və çoxsətirli şərhlər zamanı `sqlparse.parse()` funksiyasını istifadə edən tətbiqlərə təsir edir. 0.6.0 versiyasına yüksəltmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-400
FAQ2
In which library was CVE-2026-59893 discovered?
CVE-2026-59893 is a ReDoS vulnerability discovered in the sqlparse library.
To which version should one upgrade to mitigate CVE-2026-59893?
To mitigate this vulnerability, it is recommended to upgrade the sqlparse library to version 0.6.0.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.