~ / search / GHSA-pq9p-pc3p-9hm4

GHSA-pq9p-pc3p-9hm4

python-sql SQL injection vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-9774

Packages

EcosystemPackageAffectedFixed in
PyPI python-sql < 1.5.2 1.5.2

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability was found in python-sql where unary operators do not escape non-Expression (like `And` and `Or`) which makes any system exposing those vulnerable to an SQL injection attack.

References

External links from the advisory. They lead to third-party sites.