Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/mysql-connector-python@9.1.0
purl pkg:pypi/mysql-connector-python@9.1.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-hcw3-ymdx-pfas MySQL Connector/Python connector takeover vulnerability Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). CVE-2024-21272
GHSA-hgjp-83m4-h4fj

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T12:40:15.414270+00:00 GitLab Importer Fixing VCID-hcw3-ymdx-pfas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mysql-connector-python/CVE-2024-21272.yml 38.0.0
2026-04-01T16:06:41.661778+00:00 GHSA Importer Fixing VCID-hcw3-ymdx-pfas https://github.com/advisories/GHSA-hgjp-83m4-h4fj 38.0.0
2026-04-01T12:49:24.583446+00:00 GithubOSV Importer Fixing VCID-hcw3-ymdx-pfas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-hgjp-83m4-h4fj/GHSA-hgjp-83m4-h4fj.json 38.0.0