{"action":"Upgrade mysql-connector-python to 9.1.0 or later.","affected":[{"fixed":"9.1.0","introduced":"0"}],"component":"mysql-connector-python","cve_ids":["CVE-2024-21272"],"ecosystem":"PyPI","epss":0.00513,"exploited":false,"fixed_versions":["9.1.0"],"ghsa_id":"GHSA-hgjp-83m4-h4fj","id":"tcs_01M5KGV2HYDSMV85Z7ERP04XF4","modified_at":"2026-07-07T17:47:06.186673381Z","published_at":"2026-07-07T14:34:43.264746Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1685","https://nvd.nist.gov/vuln/detail/CVE-2024-21272","https://github.com/mysql/mysql-connector-python/commit/e6b927af06e8a85bd3754f602df96a5592b4558c","https://github.com/mysql/mysql-connector-python","https://www.oracle.com/security-alerts/cpuoct2024.html","https://pypi.org/project/mysql-connector-python","https://github.com/advisories/GHSA-hgjp-83m4-h4fj"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1685","url":"https://osv.dev/vulnerability/PYSEC-2026-1685"}],"summary":"MySQL Connector/Python connector takeover vulnerability"}