Medium ELSA-2024-4245 1 CVE

Moderate: python3 security update (Oracle Linux 8)

Published Jul 3, 2024 · Updated Jul 3, 2024

Ecosystem: Oracle Linux

Summary

[1.1.0-3]
- Security fix for CVE-2024-36039
Resolves: RHEL-38366

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	python3.12-PyMySQL	0:1.1.0-3.el8_10

Vulnerabilities 1

Medium 6.3

CVE-2024-36039 Public exploit

PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

python-PyMySQL py3-pymysql pymysql python-pymysql Debian Ubuntu Azure Linux Wolfi PyPI

May 21, 2024