CVE-2024-36039
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.
- Update to 1.0.2-1ubuntu1.22.04.1
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for python-pymysql in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.
Check your installed stack and versions against the current vulnerability feeds.