Skip to content

Commit 903de2a

Browse files
matrixiseclaude
andauthored
fix(deps): upgrade sqlparse to 0.6.0 for security fixes (#241)
Resolves multiple high/medium severity Dependabot alerts: quadratic CPU consumption during tuple list reindentation and comment grouping, ReDoS on dollar-quoted SQL literals, unbounded value materialization in TokenList.__init__ before depth/token caps trigger, and SQL string breakout via unescaped backslashes in generated Python/PHP snippets. GHSA-cfqr-cjx5-5jcm, GHSA-prg7-hcfm-mfcr, GHSA-pwgv-4x5q-6m9f, GHSA-f2ff-p2ww-7p4p, GHSA-3496-9g83-7v6x Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
1 parent 4d0d987 commit 903de2a

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

‎requirements/dev.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -189,7 +189,7 @@ soupsieve==2.8.3
189189
# via
190190
# -c requirements/main.txt
191191
# beautifulsoup4
192-
sqlparse==0.5.5
192+
sqlparse==0.6.0
193193
# via
194194
# -c requirements/main.txt
195195
# django

‎requirements/main.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -157,7 +157,7 @@ six==1.17.0
157157
# via python-dateutil
158158
soupsieve==2.8.3
159159
# via beautifulsoup4
160-
sqlparse==0.5.5
160+
sqlparse==0.6.0
161161
# via django
162162
static3==0.7.0
163163
# via dj-static

0 commit comments

Comments
 (0)