Search for packages
Package details: pkg:pypi/mysql-connector-python@2.1.5
purl pkg:pypi/mysql-connector-python@2.1.5
Tags Ghost
Next non-vulnerable version 9.1.0
Latest non-vulnerable version 9.1.0
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-wg7g-k24r-aaap
Aliases:
CVE-2017-3590
GHSA-2cf3-g243-hhfx
Privilege Escalation Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors.
8.0.5
Affected by 10 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:26:18.491946+00:00 GitLab Importer Affected by VCID-wg7g-k24r-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mysql-connector-python/CVE-2017-3590.yml 34.0.1
2024-09-17T22:13:01.074861+00:00 GHSA Importer Affected by VCID-wg7g-k24r-aaap https://github.com/advisories/GHSA-2cf3-g243-hhfx 34.0.1
2024-04-23T17:41:04.544206+00:00 GHSA Importer Affected by VCID-wg7g-k24r-aaap https://github.com/advisories/GHSA-2cf3-g243-hhfx 34.0.0rc4
2024-01-03T17:52:20.509723+00:00 GitLab Importer Affected by VCID-wg7g-k24r-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mysql-connector-python/CVE-2017-3590.yml 34.0.0rc1