VYPR
Medium severity6.3OSV Advisory· Published May 21, 2024· Updated Apr 15, 2026

CVE-2024-36039

CVE-2024-36039

Description

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
pymysqlPyPI
< 1.1.11.1.1

Affected products

41

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.