Critical DoS Vulnerabilities in openSUSE python3-sqlparse

Multiple denial of service (DoS) vulnerabilities have been identified in the openSUSE python3-sqlparse package, affecting various SUSE Linux distributions. The vulnerabilities include CVE-2026-54284, which allows excessive resource consumption through high algorithm complexity, and CVE-2026-59893, which leads to DoS via inefficient regex handling. Additionally, CVE-2026-59894 permits code injection through improper escaping, while CVE-2026-71491 results in quadratic complexity issues. These vulnerabilities were published on August 17, 2026, and have been assigned high severity ratings. Users are urged to apply the provided patches immediately to mitigate risks. Affected systems include SUSE Linux Enterprise Server and openSUSE Leap versions. The current status is that patches are available and should be applied without delay.

Key Points: • Four critical DoS vulnerabilities identified in python3-sqlparse. • Patches are available for affected SUSE Linux distributions. • Immediate action is required to mitigate potential exploitation.