Search for packages
Package details: pkg:pypi/mysql-connector-python@9.1.0
purl pkg:pypi/mysql-connector-python@9.1.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gxzw-cnuw-2uh4 MySQL Connector/Python connector takeover vulnerability Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). CVE-2024-21272
GHSA-hgjp-83m4-h4fj

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T11:18:56.957666+00:00 GitLab Importer Fixing VCID-gxzw-cnuw-2uh4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mysql-connector-python/CVE-2024-21272.yml 37.0.0
2025-07-31T12:39:09.042159+00:00 GHSA Importer Fixing VCID-gxzw-cnuw-2uh4 https://github.com/advisories/GHSA-hgjp-83m4-h4fj 37.0.0
2025-07-31T08:30:07.955281+00:00 GithubOSV Importer Fixing VCID-gxzw-cnuw-2uh4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-hgjp-83m4-h4fj/GHSA-hgjp-83m4-h4fj.json 37.0.0