PyPI/mysql-connector-python CVE-2024-21272: high 7.5, EPSS 0.51%

MySQL Connector/Python connector takeover vulnerability

Action: Upgrade mysql-connector-python to 9.1.0 or later.

pip install mysql-connector-python==9.1.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1685
• https://nvd.nist.gov/vuln/detail/CVE-2024-21272
• https://github.com/mysql/mysql-connector-python/commit/e6b927af06e8a85bd3754f602df96a5592b4558c
• https://github.com/mysql/mysql-connector-python
• https://www.oracle.com/security-alerts/cpuoct2024.html
• https://pypi.org/project/mysql-connector-python
• https://github.com/advisories/GHSA-hgjp-83m4-h4fj

CVE-2024-21272 · published 2026-07-07T14:34:43.264746Z · modified 2026-07-07T17:47:06.186673381Z · JSON