Security Advisories

CGA-6vp8-66hx-q9wg

Published

Last updated

Package

py3-pymysql

Latest Update

Fixed

Fixed Version

1.1.1-r0

Aliases

Severity

9.8

Critical

CVSS V3

PyMySQL SQL Injection vulnerability

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™