Public library
Cybersecurity articles
Automated coverage from researcher feeds — text + code extraction, no thumbnails. Sort by recent, popular, or trending.
All sources ×PortSwigger Research RSSGoogle Project ZeroUnit 42 (Palo Alto)r/netsec RSSSchneier on SecurityZero Day InitiativeMicrosoft MSRC BlogTrail of BitsnccgroupCisco TalosPentesterLand WriteupsSecurelist (Kaspersky)Cloudflare Blogr/bugbounty RSSKrebs on Security RSSSANS Internet Storm Center RSSThe Hacker News RSSbleepingGitHub Security Advisories
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
Read →### Summary sqlparse contains a Regular Expression Denial of Service (ReDoS) vulnerability in its dollar-quoted SQL literal lexer. The regex pattern at `sqlparse/keywords.py:33` uses a backreference (`\1`) to match closing dollar-quote delimiters, causing O(n²) CPU complexity when processing inpu...
Prefer original Bugflare research? Browse writeups