Medium ELSA-2024-4244 1 CVE

Moderate: python3.11-PyMySQL security update (Oracle Linux 8)

Published Jul 2, 2024 · Updated Jul 2, 2024

Ecosystem: Oracle Linux

Summary

[1.0.2-2]
- Security fix for CVE-2024-36039
Resolves: RHEL-38365

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	python3.11-PyMySQL	0:1.0.2-2.el8_10

Vulnerabilities 1

Medium 6.3

CVE-2024-36039 Public exploit

PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

python-PyMySQL py3-pymysql pymysql python-pymysql Debian Ubuntu Azure Linux Wolfi PyPI

May 21, 2024