The andialbrecht sqlparse library is affected by a high-severity vulnerability that allows unauthenticated attackers to cause a denial of service via resource exhaustion.

This vulnerability involves inefficient algorithmic and regular expression complexity, which can be exploited by an unauthenticated attacker to trigger excessive CPU consumption when parsing maliciously crafted SQL queries.

The exploitation of this flaw can result in severe application downtime, as the parser consumes disproportionate system resources while processing specially formed input. Given the CVSS score of 8.7, this represents a significant threat to service availability and system stability, potentially impacting any downstream services that rely on this parser for SQL analysis.

Immediate Action: Update the sqlparse library to version 0.6.0 or higher immediately.

Proactive Monitoring: Monitor application performance metrics for spikes in CPU usage and investigate logs for abnormally complex or large SQL query strings that may indicate an exploitation attempt.

Compensating Controls: Implement strict input validation or size limits on SQL strings before they are passed to the parser to mitigate the potential for triggering the resource-intensive code paths.

Public Exploit Available: Unknown

The high CVSS score of 8.7 necessitates immediate attention to prevent potential denial of service attacks. Organizations should prioritize updating the sqlparse dependency in their Python environments to version 0.6.0 to eliminate this vulnerability.