CVE-2024-36039

The PyMySQL pure-Python MySQL client library (versions through 1.1.0 ) is vulnerable to SQL injection when processing untrusted JSON input . The root cause is that the JSONHandler component fails to escape keys during the escape_dict process. This vulnerability could allow an attacker to gain una...