Lucene search

K
osvGoogleOSV:ALSA-2024:4244
HistoryJul 02, 2024 - 12:00 a.m.

Moderate: python3.11-PyMySQL security update

2024-07-0200:00:00
Google
osv.dev
3
python
pymysql
security update
sql injection
cve-2024-36039
software

AI Score

7.2

Confidence

Low

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython.

Security Fix(es):

  • python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.