StackRadarChart IndexLive demo

CVE-2024-21272

High

Advisory

Published 15 Oct 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 9; of 17,781 indexed, latest versions
Container images: 6; deployed by those charts
Fix available: 1 of 1; affected package

MySQL Connector/Python connector takeover vulnerability

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 6 images.

Affected package	Affected versions	Fixed in	Images
mysql-connector-pythonpypi	8.0.29, 8.2.0, 8.3.0, 9.0.0	9.1.0	6

OSV records: GHSA-hgjp-83m4-h4fj
Also known as: PYSEC-2026-1685

Charts affected

9 by stars

Chart

Latest

Affected images

Radar Score

airflowairflow-helm

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	mysql-connector-python@8.3.0	9.1.0

Open the chart page →

11,367

helm-samplebehnambm-helm-chart

1 of 3 See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
behnambm/docker-sample :v1	bd3ad88afff9	mysql-connector-python@8.2.0	9.1.0

Open the chart page →

2,727

flask-contactsfirst-idror-chart

1 of 3 See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
shashkist/flask-contacts-app :latest	581de1fd6084	mysql-connector-python@9.0.0	9.1.0

Open the chart page →

5,704

flask-contactsflask-contacts-generic

1 of 3 See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
shashkist/flask-contacts-app :latest	581de1fd6084	mysql-connector-python@9.0.0	9.1.0

Open the chart page →

5,704

rada-platformrada-platform

1 of 7 See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	mysql-connector-python@9.0.0	9.1.0

Open the chart page →

21,211

airflowsb-helm-charts

1 of 1 See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.1	e5560ad0b86e	mysql-connector-python@8.0.29	9.1.0

Open the chart page →

10,209

first-chartshashkist-test

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
shashkist/flask-contacts-app :latest	581de1fd6084	mysql-connector-python@9.0.0	9.1.0

Open the chart page →

3,045

tensor_apptensor-app

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	mysql-connector-python@8.0.29	9.1.0

Open the chart page →

17,461

flask-contactstest-configmap

1 of 3 See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-21272.

Container image	Digest	Package	Fixed in
shashkist/flask-contacts-app :latest	581de1fd6084	mysql-connector-python@9.0.0	9.1.0

Open the chart page →

5,704

Container images carrying it

6 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
shashkist/flask-contacts-app :latest	581de1fd6084	mysql-connector-python@9.0.0	9.1.0	4
apache/airflow :2.8.4-python3.9	64e58748b6b9	mysql-connector-python@8.3.0	9.1.0	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	mysql-connector-python@9.0.0	9.1.0	1
apache/airflow :2.8.1	e5560ad0b86e	mysql-connector-python@8.0.29	9.1.0	1
behnambm/docker-sample :v1	bd3ad88afff9	mysql-connector-python@8.2.0	9.1.0	1
xeladock/mysql_dns :latest	4baf531453f1	mysql-connector-python@8.0.29	9.1.0	1