CVE-2024-36039_PoC

CVE-2024-36039: PyMySQL Object Injection to SQL Injection PoC A complete, reproducible Proof of Concept PoC laboratory for CVE-2024-36039 , demonstrating how an Object Injection vulnerability in PyMySQL versions = 1.1.0 can be escalated to a full SQL Injection using MariaDB's ODBC Escape Sequence...

PT-2026-105704

These are all security issues fixed in the python313-PyMySQL-1.2.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11995-1 python313-PyMySQL-1.2.0-1.2 on GA media

These are all security issues fixed in the python313-PyMySQL-1.2.0-1.2 package on the GA media of openSUSE Tumbleweed...

Rocky Linux 8.6 [CIQ] Security Update: python39-PyMySQL Multiple Vulnerabilities (ciqsa-2026_0758)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260758 advisory. This advisory aggregates security fixes for the python-PyMySQL SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8 [CIQ] Security Update: python3.11-PyMySQL (crlsa-2024_4244)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20244244 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8.6 [CIQ] Security Update: python2-PyMySQL Multiple Vulnerabilities (ciqsa-2026_0181)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260181 advisory. This advisory aggregates security fixes for the python-PyMySQL SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8 [CIQ] Security Update: python3.12-PyMySQL (crlsa-2024_4245)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20244245 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8.8 [CIQ] Security Update: python39-PyMySQL (ciqsa-2026_1144)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261144 advisory. This advisory aggregates security fixes for the python-PyMySQL SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: python3.12-PyMySQL / python3.12-PyMySQL+rsa (crlsa-2024_9193)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249193 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: python3.11-PyMySQL / python3.11-PyMySQL+rsa (crlsa-2024_9194)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249194 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8.6 [CIQ] Security Update: python38-PyMySQL Multiple Vulnerabilities (ciqsa-2026_0215)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260215 advisory. This advisory aggregates security fixes for the python-PyMySQL SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

CLSA-2026-1768435940 TuxCare security update for pymysql (1 CVE)

TuxCare rebuilt pymysql to address 1 CVE. Fixed in 0.10.1.post1+tuxcare...

PT-2026-73701

TuxCare rebuilt pymysql to address 1 CVE. Fixed in 0.10.1.post1+tuxcare...

PYSEC-2026-502 PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

ROOT-APP-PYPI-CVE-2024-36039 CVE-2024-36039 in rootio-PyMySQL - Patched by Root

Root has patched CVE-2024-36039 in the rootio-PyMySQL package for Root:PyPI. Multiple fixed versions available...

Unity Linux 20.1050e / 20.1070e Security Update: python-PyMySQL (UTSA-2026-017341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017341 advisory. PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict. Tenable has extracted the preceding...

Azure Linux 3.0 Security Update: python-PyMySQL (CVE-2024-36039)

The version of python-PyMySQL installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36039 advisory. - PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not...

MiracleLinux 9 : python3.12-PyMySQL-1.1.0-3.el9 (AXSA:2024-9377:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9377:02 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : python3.11-PyMySQL-1.0.2-2.el9 (AXSA:2024-9378:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9378:02 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the...