Medium DLA-3822-1 1 CVE

python-pymysql - security update

Published May 27, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	python-pymysql	0.9.3-1+deb10u1

Vulnerabilities 1

Medium 6.3

CVE-2024-36039 Public exploit

PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

python-PyMySQL py3-pymysql pymysql python-pymysql Debian Ubuntu Azure Linux Wolfi PyPI

May 21, 2024