Debian: Security Advisory (DLA-3822-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3822-1 python-pymysql - security update

Bulletin has no description...

SQL Injection

PyMySQL is vulnerable to SQL Injection. The vulnerability is due to improper JSON sanitization within the escapedict function, which allows an attacker execute arbitrary SQL if an application handles untrusted JSON user input...

CVE-2024-36039

A flaw was found in PyMySQL. When processing untrusted JSON input, keys are not escaped by the escapedict function due to insufficient input sanitization, allowing an attacker to inject malicious SQL queries. Mitigation Make sure the permissions are set correctly for each user, database, table,...

SUSE CVE-2024-36039

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

GHSA-V9HF-5J83-6XPP vulnerabilities

Vulnerabilities for packages: py3-pymysql...

PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

GHSA-V9HF-5J83-6XPP PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

GHSA-V9HF-5J83-6XPP vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-36039 vulnerabilities

Vulnerabilities for packages: py3-pymysql...

AZL-44457 CVE-2024-36039 affecting package python-PyMySQL for versions less than 1.1.1-3

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

CVE-2024-36039

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

AZL-43726 CVE-2024-36039 affecting package python-PyMySQL 0.9.3-3

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

DEBIAN-CVE-2024-36039

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

CVE-2024-36039 vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-36039

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

UBUNTU-CVE-2024-36039

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

CVE-2024-36039: Improper Neutralization of Special Elements used in an SQL Command

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

CVE-2024-36039

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escapedict...

PT-2024-4421

Name of the Vulnerable Software and Affected Versions PyMySQL versions 1.1.0 and earlier Description The issue is related to the JSON Handler component of the PyMySQL library for Python, which does not properly escape keys using the escape dict procedure. This can allow a remote attacker to gain...