[GHSA-v9hf-5j83-6xpp] PyMySQL SQL Injection vulnerability

[vpmedia]

Updates

• Affected products

Comments
The asyncmy package is also affected by this vulnerability, because it's based on pymysql codebase.
See: long2ice/asyncmy#134

[helixplant]

Hi @vpmedia,
We cannot add the package associated with long2ice/asyncmy to this advisory because it is not officially associated with PyMySQL/PyMySQL. If the maintainers of long2ice/asyncmy wish to issue alerts regarding their package’s vulnerability to CVE-2024-36039, they can do so by utilizing the security advisory feature within their repository.

For more information please refer to the following: https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/creating-a-repository-security-advisory