Please update the pip package dependencies #543

Activity

1. cwegener commented on Apr 5, 2022

   

   cwegener

   on Apr 5, 2022

   More actions

   Running pip install --upgrade cli-helpers after pip install mssqli-cli is how I was able to use mssql-cli on Python 3.10

   👍React with 👍5Reacted by Matt, Seth Goings, Christopher Trent, Jamrus Ruttanayukol and Karl Levik
2. ggt-steven-combs commented on Apr 21, 2022

   

   ggt-steven-combs

   on Apr 21, 2022

   More actions

   I can't even use this because of the dependency issue. Is there a fork or a PR for this yet?
3. swells commented on May 13, 2022

   

   swells

   on May 13, 2022

   More actions

   It would be great if the deps could be updated due to the security vulnerability of the sqlparse version

   We take a dependence on this package and our governed repositories scans for violations.
   dependency sqlparse==0.2.4 as a security violation.

   StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
   The formatter function that strips comments from a SQL contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments.

   Recommendation

   Upgrade to version sqlparse - 0.4.2
4. rubgithub commented on Jan 19, 2026

   

   rubgithub

   on Jan 19, 2026

   More actions

   It would be great if the deps could be updated due to the security vulnerability of the sqlparse version

   We take a dependence on this package and our governed repositories scans for violations. dependency sqlparse==0.2.4 as a security violation.

   StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
   The formatter function that strips comments from a SQL contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments.

   Recommendation

   Upgrade to version sqlparse - 0.4.2

   Hi everyone,

   I've created a modernized fork of mssql-cli that addresses the compatibility issues discussed here.

   You can find the code and the fix here:
   👉 mssql-cli (branch: py311-fix)

   Quick Summary:

   • Python Support: Fully compatible with 3.10, 3.11, and 3.12.
   • Engine Upgrade: Migrated SqlToolsService to .NET 8.0.
   • macOS Silicon: Native support for M1/M2/M3 chips. (Note: Verified via GitHub Actions. Manual physical testing is pending.)
   • Binaries: Ready-to-use executables available in the Releases section.