The andialbrecht sqlparse library is affected by a high-severity vulnerability that allows unauthenticated attackers to cause a denial of service via regular expression complexity issues.

This vulnerability is caused by inefficient regular expression complexity within the parser, allowing an unauthenticated attacker to trigger catastrophic backtracking, which leads to high CPU usage and service degradation.

The primary risk is a denial of service, which can cause significant disruption to business operations that rely on the sqlparse module for query processing. Given the CVSS score of 7.5, this vulnerability represents a high-impact risk to system availability and requires timely remediation.

Immediate Action: Update the sqlparse library to version 0.6.0 or higher immediately.

Proactive Monitoring: Monitor server resource metrics, specifically CPU usage, to identify potential exploitation attempts characterized by sudden, sustained spikes in processing time.

Compensating Controls: Implement request timeouts to ensure that long-running parsing processes are terminated, preventing a single malicious request from permanently hanging the application thread.

Public Exploit Available: Unknown

Organizations should prioritize the update of this dependency to version 0.6.0, as it addresses the core regex performance flaw. Failure to patch may expose the application to denial of service attacks that are straightforward to execute and difficult to block without the vendor update.