{"action":"Upgrade mysql-connector-python to 9.1.0 or later.","affected":[{"fixed":"9.1.0","introduced":"0"}],"component":"mysql-connector-python","cve_ids":["CVE-2024-21272"],"ecosystem":"PyPI","epss":0.00513,"exploited":false,"fixed_versions":["9.1.0"],"ghsa_id":"GHSA-hgjp-83m4-h4fj","id":"tcs_01M5KFKMQP0BR8GNJBG94WR9G7","modified_at":"2026-09-10T03:50:19.802969095Z","published_at":"2024-10-15T21:30:39Z","references":["https://osv.dev/vulnerability/GHSA-hgjp-83m4-h4fj","https://nvd.nist.gov/vuln/detail/CVE-2024-21272","https://github.com/mysql/mysql-connector-python/commit/e6b927af06e8a85bd3754f602df96a5592b4558c","https://github.com/mysql/mysql-connector-python","https://www.oracle.com/security-alerts/cpuoct2024.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hgjp-83m4-h4fj","url":"https://osv.dev/vulnerability/GHSA-hgjp-83m4-h4fj"}],"summary":"MySQL Connector/Python connector takeover vulnerability"}