You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This release fixes a vulnerability (CVE-2024-36039).
All users are recommended to update to this version.
If you can not update soon, check the input value from untrusted source has an expected type.
Only dict input from untrusted source can be an attack vector.
What's Changed
Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL
and might cause SQL injection. (CVE-2024-36039)
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Looking for the latest TMZ celebrity news? You've come to the right place. From shocking Hollywood scandals to exclusive videos, TMZ delivers it all in real time.
Whether it’s a red carpet slip-up, a viral paparazzi moment, or a legal drama involving your favorite stars, TMZ news is always first to break the story. Stay in the loop with daily updates, insider tips, and jaw-dropping photos.
🎥 Watch TMZ Live
TMZ Live brings you daily celebrity news and interviews straight from the TMZ newsroom. Don’t miss a beat—watch now and see what’s trending in Hollywood.
Uh oh!
There was an error while loading. Please reload this page.
-
Warning
This release fixes a vulnerability (CVE-2024-36039).
All users are recommended to update to this version.
If you can not update soon, check the input value from untrusted source has an expected type.
Only dict input from untrusted source can be an attack vector.
What's Changed
Cursor.execute()
. It didn't produce valid SQLand might cause SQL injection. (CVE-2024-36039)
Merged PRs
New Contributors
Full Changelog: v1.1.0...v1.1.1
This discussion was created from the release v1.1.1.
Beta Was this translation helpful? Give feedback.
All reactions