I think the name "parameters" causes a confusion here. It basically means

    def execute(sql, parameters):

not 

    def execute(sql, *parameters):

So ``con.execute('insert into foo values (?, ?)', (4, 5))`` is the correct usage of the API.

Also, this looks like a duplicate of issue 20364.