Skip to content

Releases: PyMySQL/PyMySQL

v1.1.1

21 May 11:07
Compare
Choose a tag to compare

Warning

This release fixes a vulnerability (CVE-2024-36039).
All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type.
Only dict input from untrusted source can be an attack vector.

What's Changed

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL
    and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param by @svaskov in #1145

Merged PRs

New Contributors

Full Changelog: v1.1.0...v1.1.1

v1.1.0

26 Jun 05:34
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v1.0.3...v1.1.0

v1.1.0rc2

15 Jun 08:00
f3f3477
Compare
Choose a tag to compare
v1.1.0rc2 Pre-release
Pre-release

What's Changed

New Contributors

Full Changelog: v1.1.0rc1...v1.1.0rc2

v1.1.0rc1

25 May 06:28
2596bbb
Compare
Choose a tag to compare
v1.1.0rc1 Pre-release
Pre-release

What's Changed

New Contributors

Full Changelog: v1.0.3...v1.1.0rc1

v1.0.3

28 Mar 03:56
930b250
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v1.0.2...v1.0.3

v1.0.3rc1

23 Mar 16:44
d0c2871
Compare
Choose a tag to compare
v1.0.3rc1 Pre-release
Pre-release

What's Changed

New Contributors

Full Changelog: v1.0.2...v1.0.3rc1

v1.0.2

23 Mar 16:44
Compare
Choose a tag to compare
v1.0.2