Red Hat Security Advisory

RHSA-2024:4244

python3.11-PyMySQL security update

Released 2024-07-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2024-23896 CVE-2024-36039 · GHSA-v9hf-5j83-6xpp

LOW 29

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00691 Published 2024-05-21 Partial fix · 1.1.1 CWE-89