Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-d041-0b74-8b13
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-d041-0b74-8b13.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-d041-0b74-8b13
Upstream
CVE-2024-4340
GHSA-2m57-hf25-phgg
Withdrawn
2026-11-12T08:00:07Z
Published
2024-04-15T20:21:25Z
Modified
2026-11-12T08:20:19Z
Summary
Reopened: bumped to 0.4.4, which is still vulnerable. Bumped version 0.4.4 is still in < 0.5.0; upstream fix 0.5.0
Details
References
https://advisory.echohq.com/cve/CVE-2024-4340
https://github.com/advisories/GHSA-2m57-hf25-phgg
Affected packages
Echo:PyPI
/
sqlparse
Package
Name
sqlparse
Purl
pkg:pypi/sqlparse
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Database specific
source
"https://advisory.echohq.com/osv/ECHO-d041-0b74-8b13.json"
ECHO-d041-0b74-8b13 - OSV