afw (>=0.0.6, <=0.0.21), buckets (>=1.0.6, <=1.0.14) +16 more potentially affected by CVE-2024-21272 via mysql-connector-python (9.0.0)

mysql-connector-python PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - afw =0.0.6, =1.0.6, =0.2.1, =0.1.0, =0.8.0, =1.0.0, =0.2.19, =0.0.0, =0.1.0, =0.0.1, =0.0.2, =0.0.5 - privacysherloc...

boatbuddy (>=0.5.6, <=0.12.0), ctpysql (>=0.0.1, <=0.0.2) +37 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.33)

mysql-connector-python PYPI version 8.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - boatbuddy =0.5.6, =0.0.1, =0.2.0, =1.0.1, =0.18.0.1, =1.0.0, =1.0.0, =1.2.0, =0.1.0.dev20230322, =0.0.1, =1.3.1,...

alphadb (>=1.0.0b1, <=1.0.0b19), autopilotml (>=1.0.1, <=1.0.14) +6 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.2.0)

mysql-connector-python PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - alphadb =1.0.0b1, =1.0.1, =0.0.11, =0.0.1, =0.2.3, =2.5.0, =2.11.0 Source cves: CVE-2024-21272 Source advisory:...

agixt (>=1.4.20, <=1.4.42), bepatient-db (0.4.0) +13 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.1.0)

mysql-connector-python PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - agixt =1.4.20, =0.0.107, =0.0.2, =0.0.3, =0.0.1, =1.0.0, =0.1.0, =0.4.3, =0.0.1, =0.0.0, =0.0.7 - wolf-core 2.0.1...

anoteai (>=0.10.0, <=0.20.0), celery-director (>=0.7.0, <=0.10.0) +9 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.31)

mysql-connector-python PYPI version 8.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - anoteai =0.10.0, =0.7.0, =1.3.0, =3.0.0, =1.0.0b27, =1.0.0, =1.0.1, =4.0.0a0, =4.0.1a0 - wwdtm 2.0.8 Source cves:...

opengamedata-api-utils (>=1.1.0, <=1.1.1), opengamedata-common (>=0.0.1, <=1.2.2) +2 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.25)

mysql-connector-python PYPI version 8.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - opengamedata-api-utils =1.1.0, =0.0.1, =1.0.0.dev782, =1.0.0.dev782, =7.1.2 Source cves: CVE-2024-21272 Source...

bobrtools (>=0.1.22, <=0.1.32), dataloom (>=1.0.0, <=2.4.2) +12 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.3.0)

mysql-connector-python PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - bobrtools =0.1.22, =1.0.0, =2.0.0, =1.0.33, =1.0.6, =2.1.9, =3.7.5, =0.0.0, =0.0.10, =1.0.2, =1.0.3 Source cves:...

azelia-hash (>=0.1.0, <=0.1.1), core-test-utils (1.0.0) +3 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.27)

mysql-connector-python PYPI version 8.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - azelia-hash =0.1.0, =1.0.1, =1.0.2, =2.0.0b2, =2.0.0rc2 Source cves: CVE-2024-21272 Source advisory:...

brad-agent (>=0.1.33, <=0.1.34), dbt-databend (1.1.0) +21 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.29)

mysql-connector-python PYPI version 8.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - brad-agent =0.1.33, =1.4.1, =0.3.0, =1.5.0a1, =2.1.0, =1.1.0, =0.0.1.1, =0.3.8, =6.12.1, =0.0.1, =0.0.3 -...

afw (>=0.0.6, <=0.0.21), buckets (>=1.0.6, <=1.0.14) +16 more potentially affected by CVE-2024-21272 via mysql-connector-python (9.0.0)

mysql-connector-python PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - afw =0.0.6, =1.0.6, =0.2.1, =0.1.0, =0.8.0, =1.0.0, =0.2.19, =0.0.0, =0.1.0, =0.0.1, =0.0.2, =0.0.5 - privacysherloc...

santoku (>=200902.10.0, <=201111.17.0) potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.5)

mysql-connector-python PYPI version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - santoku =200902.10.0, =201111.17.0 Source cves: CVE-2024-21272 Source advisory: OSV:GHSA-HGJP-83M4-H4FJ...

afs2-datasource (>=3.8.0.0, <=3.8.2), base-automation (>=0.0.2, <=0.0.8) +2 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.26)

mysql-connector-python PYPI version 8.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - afs2-datasource =3.8.0.0, =0.0.2, =2.1.0b12, =0.1.4, =1.0.1456 Source cves: CVE-2024-21272 Source advisory:...

ai-runner-hjy (>=0.0.1, <=0.0.3), aimanager-hjy (>=0.1.1, <=0.3.0) +124 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.4.0)

mysql-connector-python PYPI version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - ai-runner-hjy =0.0.1, =0.1.1, =2.1.1rc1, =1.0.12, =0.1.0, =1.0.0a2, =0.4.2, =0.10.5, =0.21.0, =0.1.0b0, =0.1.0b0,...

afw (>=0.0.6, <=0.0.21), buckets (>=1.0.6, <=1.0.14) +16 more potentially affected by CVE-2024-21272 via mysql-connector-python (9.0.0)

mysql-connector-python PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - afw =0.0.6, =1.0.6, =0.2.1, =0.1.0, =0.8.0, =1.0.0, =0.2.19, =0.0.0, =0.1.0, =0.0.1, =0.0.2, =0.0.5 - privacysherloc...

Access Control Bypass

Overview mysql-connector-python is a MySQL driver written in Python which does not depend on MySQL C client libraries and implements the DB API v2.0 specification PEP-249. Affected versions of this package are vulnerable to Access Control Bypass via multiple protocols. An attacker can take over t...

afs2-datasource (>=3.8.0.0, <=3.8.2), afw (>=0.0.6, <=0.0.21) +268 more potentially affected by CVE-2024-21272 via mysql-connector-python (>=8.0.5, <=9.0.0)

mysql-connector-python PYPI version =8.0.5, =3.8.0.0, =0.0.6, =1.4.20, =0.0.1, =0.1.1, =0.0.1, =1.0.0b1, =0.10.0, =2.1.1rc1, =1.0.12, =0.1.0, =1.0.1, =0.1.0, =0.0.2, =0.0.8 and more Source cves: CVE-2024-21272 Source advisory: MEND:CVE-2024-21272...

UBUNTU-CVE-2024-21170

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successfu...

OPENSUSE-SU-2024:14149-1 python310-mysql-connector-python-8.2.0-1.5 on GA media

These are all security issues fixed in the python310-mysql-connector-python-8.2.0-1.5 package on the GA media of openSUSE Tumbleweed...

santoku (>=200902.10.0, <=201111.17.0) potentially affected by CVE-2019-2435 via mysql-connector-python (8.0.5)

mysql-connector-python PYPI version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - santoku =200902.10.0, =201111.17.0 Source cves: CVE-2019-2435 Source advisory: GHSA-V5RQ-W2XM-7G5F...

santoku (>=200902.10.0, <=201111.17.0) potentially affected by CVE-2019-2435 via mysql-connector-python (8.0.5)

mysql-connector-python PYPI version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - santoku =200902.10.0, =201111.17.0 Source cves: CVE-2019-2435 Source advisory: OSV:GHSA-V5RQ-W2XM-7G5F...