CVE-2024-36039

Published May 21st, 2024

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

PyMySQL/PyMySQL

MySQL client library for Python

GitHub

7.84K