allsql (>=0.0.1, <=0.0.5), bribrain (>=1.0.3, <=1.3.6) +5 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.28)

mysql-connector-python PYPI version 8.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - allsql =0.0.1, =1.0.3, =0.3.0, =0.0.6, =1.0.1, =2.0.0rc3, =2.0.5 Source cves: CVE-2024-21272 Source advisory:...

brad-agent (>=0.1.33, <=0.1.34), dbt-databend (1.1.0) +21 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.29)

mysql-connector-python PYPI version 8.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - brad-agent =0.1.33, =1.4.1, =0.3.0, =1.5.0a1, =2.1.0, =1.1.0, =0.0.1.1, =0.3.8, =6.12.1, =0.0.1, =0.0.3 -...

burgos (>=0.0.4, <=2.2.1), configops (>=0.1.5, <=0.2.3) +3 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.30)

mysql-connector-python PYPI version 8.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - burgos =0.0.4, =0.1.5, =3.0.4, =3.5.6 - wwdtm 2.0.7 Source cves: CVE-2024-21272 Source advisory: OSV:PYSEC-2026-168...

anoteai (>=0.10.0, <=0.20.0), celery-director (>=0.7.0, <=0.10.0) +9 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.31)

mysql-connector-python PYPI version 8.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - anoteai =0.10.0, =0.7.0, =1.3.0, =3.0.0, =1.0.0b27, =1.0.0, =1.0.1, =4.0.0a0, =4.0.1a0 - wwdtm 2.0.8 Source cves:...

blackline-mysql (>=0.1.0a0, <=0.1.2), csv-db-loader (1.0.0) +6 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.32)

mysql-connector-python PYPI version 8.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - blackline-mysql =0.1.0a0, =0.0.1, =0.0.1, =0.0.3, =0.80.0, =0.3.8, =0.3.18 Source cves: CVE-2024-21272 Source...

boatbuddy (>=0.5.6, <=0.12.0), ctpysql (>=0.0.1, <=0.0.2) +37 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.33)

mysql-connector-python PYPI version 8.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - boatbuddy =0.5.6, =0.0.1, =0.2.0, =1.0.1, =0.18.0.1, =1.0.0, =1.0.0, =1.2.0, =0.1.0.dev20230322, =0.0.1, =1.3.1,...

agixt (>=1.4.20, <=1.4.42), bepatient-db (0.4.0) +13 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.1.0)

mysql-connector-python PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - agixt =1.4.20, =0.0.107, =0.0.2, =0.0.3, =0.0.1, =1.0.0, =0.1.0, =0.4.3, =0.0.1, =0.0.0, =0.0.7 - wolf-core 2.0.1...

alphadb (>=1.0.0b1, <=1.0.0b19), autopilotml (>=1.0.1, <=1.0.14) +6 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.2.0)

mysql-connector-python PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - alphadb =1.0.0b1, =1.0.1, =0.0.11, =0.0.1, =0.2.3, =2.5.0, =2.11.0 Source cves: CVE-2024-21272 Source advisory:...

bobrtools (>=0.1.22, <=0.1.32), dataloom (>=1.0.0, <=2.4.2) +12 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.3.0)

mysql-connector-python PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - bobrtools =0.1.22, =1.0.0, =2.0.0, =1.0.33, =1.0.6, =2.1.9, =3.7.5, =0.0.0, =0.0.10, =1.0.2, =1.0.3 Source cves:...

ai-runner-hjy (>=0.0.1, <=0.0.3), aimanager-hjy (>=0.1.1, <=0.3.0) +124 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.4.0)

mysql-connector-python PYPI version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - ai-runner-hjy =0.0.1, =0.1.1, =2.1.1rc1, =1.0.12, =0.1.0, =1.0.0a2, =0.4.2, =0.10.5, =0.21.0, =0.1.0b0, =0.1.0b0,...

afw (>=0.0.6, <=0.0.21), buckets (>=1.0.6, <=1.0.14) +16 more potentially affected by CVE-2024-21272 via mysql-connector-python (9.0.0)

mysql-connector-python PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - afw =0.0.6, =1.0.6, =0.2.1, =0.1.0, =0.8.0, =1.0.0, =0.2.19, =0.0.0, =0.1.0, =0.0.1, =0.0.2, =0.0.5 - privacysherloc...

PYSEC-2026-1685 MySQL Connector/Python connector takeover vulnerability

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

MySQL Connector/Python connector takeover vulnerability

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

dbt (0.18.1), dbt-bigquery (0.18.1) +7 more potentially affected by CVE-2024-36105 via dbt-core (0.18.1)

dbt-core PYPI version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.1 - dbt-bigquery 0.18.1 - dbt-duckdb 0.18.1 - dbt-mysql 0.18.1.1 - dbt-postgres 0.18.1 - dbt-presto 0.18.1 - dbt-redshift 0.18.1 -...

dbt (0.18.2), dbt-bigquery (0.18.2) +9 more potentially affected by CVE-2024-36105 via dbt-core (0.18.2)

dbt-core PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.2 - dbt-bigquery 0.18.2 - dbt-clickhouse =0.18.2, =0.18.0rc1, =0.0.1, =0.18.1, =0.18.2 Source cves: CVE-2024-36105 Source advisory:...

PYSEC-2026-1931 social-auth-app-django affected by Improper Handling of Case Sensitivity

Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix...

SUSE SLES12 Security Update : postfix (SUSE-SU-2026:2780-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2780-1 advisory. This update for postfix fixes the following issue Tenable has extracted the preceding description block directly from the SUSE security advisory. Note...

PYSEC-2026-1053 Openstack DBaaS (Trove) Improper Link Resolution Before File Access

The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...

[SECURITY] Fedora 44 Update: mariadb10.11-10.11.18-2.fc44

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

Linux Distros Unpatched Vulnerability : CVE-2024-21051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.34 and prior. Easily exploitable...