AIKIDO-2026-962953

TL;DR

sqlparse stores a string copy of each parsed group by processing every nested token, and it does this for every parenthesis, CASE expression, and list it wraps. Nested SQL therefore repeats that work at every level. A small payload of nested parentheses or CASE WHEN chains can stall a worker for several seconds before the existing depth and token caps abort, including on the default parse, format, and split paths. The fix concatenates each child's existing string instead of processing the whole tree.