Repository navigation
Commit 903de2a
fix(deps): upgrade sqlparse to 0.6.0 for security fixes (#241)
Resolves multiple high/medium severity Dependabot alerts: quadratic CPU
consumption during tuple list reindentation and comment grouping,
ReDoS on dollar-quoted SQL literals, unbounded value materialization
in TokenList.__init__ before depth/token caps trigger, and SQL string
breakout via unescaped backslashes in generated Python/PHP snippets.
GHSA-cfqr-cjx5-5jcm, GHSA-prg7-hcfm-mfcr, GHSA-pwgv-4x5q-6m9f,
GHSA-f2ff-p2ww-7p4p, GHSA-3496-9g83-7v6x
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>1 parent 4d0d987 commit 903de2a
2 files changed
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
189 | 189 | | |
190 | 190 | | |
191 | 191 | | |
192 | | - | |
| 192 | + | |
193 | 193 | | |
194 | 194 | | |
195 | 195 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
157 | 157 | | |
158 | 158 | | |
159 | 159 | | |
160 | | - | |
| 160 | + | |
161 | 161 | | |
162 | 162 | | |
163 | 163 | | |
| |||
0 commit comments