Medium ELSA-2024-9194 1 CVE

Moderate: python3.11-PyMySQL security update (Oracle Linux 9)

Published Nov 14, 2024 · Updated Nov 14, 2024

Ecosystem: Oracle Linux

Summary

[1.0.2-2]
- Security fix for CVE-2024-36039
Resolves: RHEL-38370

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	python3.11-PyMySQL	0:1.0.2-2.el9
Oracle Linux · 9	python3.11-PyMySQL+rsa	0:1.0.2-2.el9

Vulnerabilities 1

Medium 6.3

CVE-2024-36039 Public exploit

PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

python-PyMySQL py3-pymysql pymysql python-pymysql Debian Ubuntu Azure Linux Wolfi PyPI

May 21, 2024