Andialbrecht vulnerabilities
We track 5 vulnerabilities in Andialbrecht products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.
Latest Andialbrecht vulnerabilities
- 7.3 High severity
sqlparse: Improper Control of Generation of Code
sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed ${expr} or {${expr}} sequences that OutputPHPFilter places in double
- 8.7 High severity
sqlparse: Uncontrolled Resource Consumption
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX_GROUPING_TOKENS guard, causing quadratic CPU consumption through sqlparse.parse()
- 7.5 High severity
sqlparse: Inefficient Regular Expression Complexity
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU
- 8.7 High severity
sqlparse: Inefficient Algorithmic Complexity
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by group_parenthesis and group_case, causing quadratic CPU consumpti
- 7.5 High severity
sqlparse: Inefficient Regular Expression Complexity
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability ma