https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T09:42:40.268014+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-36039 CVE-2024-36039 2026-10-03T09:42:40.271198+00:00

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

 https://vulnerability.circl.lu/vuln/usn-6801-1 USN-6801-1 — python-pymysql vulnerability 2026-10-03T09:42:40.271286+00:00

Affected: Ubuntu:20.04:LTS: python-pymysql, Ubuntu:22.04:LTS: python-pymysql, Ubuntu:24.04:LTS: python-pymysql

It was discovered that PyMySQL incorrectly escaped untrusted JSON input. An attacker could possibly use this issue to perform SQL injection attacks.