StackRadar

CVE-2024-36039

Critical

Advisory

Published 21 May 2024In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 17,781 indexed, latest versions
Container images
45
deployed by those charts
Fix available
2 of 2
affected packages

PyMySQL SQL Injection vulnerability

Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 45 images.

Affected packageAffected versionsFixed inImages
pymysqlpypi0.9.2, 0.9.3, 0.10.1, 1.0.2+2 more1.1.145
python-pymysqldeb0.9.3-2ubuntu30.9.3-2ubuntu3.11
OSV records
GHSA-v9hf-5j83-6xppUBUNTU-CVE-2024-36039
Also known as
PYSEC-2026-502, USN-6801-1

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pymysql@0.10.1
1.1.1

Open the chart page →

52,919
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
pymysql@1.1.0
1.1.1

Open the chart page →

14,094
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
kfirfer/percona-xtradb-healthcheck:0.0.1ef7b909a8e6b
pymysql@0.10.1
1.1.1

Open the chart page →

4,957
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
pymysql@1.1.0
1.1.1

Open the chart page →

2,452
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
pymysql@0.9.3
1.1.1

Open the chart page →

4,568
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
pymysql@0.9.3
1.1.1

Open the chart page →

5,853
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
pymysql@1.0.2
1.1.1

Open the chart page →

8,967
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
pymysql@1.0.2
1.1.1

Open the chart page →

5,804
phonebook-chartphonebook-chart0.1.02 of 3See more

phonebook-chart phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:2.035c37ae2bafd
pymysql@1.1.0
1.1.1
ahmetgrbzz/web_server:2.0f018bafd2b0c
pymysql@1.1.0
1.1.1

Open the chart page →

3,034
phonebook-chartusuladamsVerified publisher0.1.52 of 3See more

phonebook-chart usuladams 0.1.5

2 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
pymysql@1.0.2
1.1.1
paulkellerman/webserver-app:latest5a37b74f61b9
pymysql@1.0.2
1.1.1

Open the chart page →

3,176
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
pymysql@1.0.2
1.1.1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
pymysql@1.0.2
1.1.1

Open the chart page →

22,568
resource-provisioningassist-iot-resource-provisioning1.0.03 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

3 of the 7 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
pymysql@1.1.0
1.1.1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
pymysql@1.1.0
1.1.1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
pymysql@1.0.3
1.1.1

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.02 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
pymysql@1.1.0
1.1.1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
pymysql@1.1.0
1.1.1

Open the chart page →

45,363
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
pymysql@1.1.0
1.1.1

Open the chart page →

1,166
phonebook-chartasumankamberoglu0.1.52 of 3See more

phonebook-chart asumankamberoglu 0.1.5

2 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
pymysql@1.0.2
1.1.1
paulkellerman/webserver-app:latest5a37b74f61b9
pymysql@1.0.2
1.1.1

Open the chart page →

3,176
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
pymysql@1.1.0
1.1.1

Open the chart page →

2,727
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
pymysql@0.9.3
1.1.1

Open the chart page →

1,382
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
pymysql@1.1.0
1.1.1

Open the chart page →

11,335
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
pymysql@1.1.0
1.1.1

Open the chart page →

16,604
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pymysql@0.9.3
1.1.1

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
pymysql@1.0.3
1.1.1

Open the chart page →

14,856
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
pymysql@1.0.2
1.1.1

Open the chart page →

4,550
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
pymysql@1.0.2
1.1.1

Open the chart page →

25,122
ihatemoneygeek-cookbookVerified publisher1.1.21 of 1See more

ihatemoney geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
ihatemoney/ihatemoney:5.2.0457fda1feb32
pymysql@1.0.2
1.1.1

Open the chart page →

1,526
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
pymysql@1.0.2
1.1.1

Open the chart page →

24,293
ldap-backupgluuVerified publisher1.6.111 of 1See more

ldap-backup gluu 1.6.11

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
gluufederation/opendj:4.3.0_011a1128b28b95
pymysql@1.0.2
1.1.1

Open the chart page →

3,064
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pymysql@0.9.3
1.1.1

Open the chart page →

4,422
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pymysql@1.0.2
1.1.1

Open the chart page →

37,671
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
pymysql@1.0.2
1.1.1

Open the chart page →

6,501
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
pymysql@0.10.1
1.1.1

Open the chart page →

3,999
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
pymysql@1.0.2
1.1.1

Open the chart page →

4,156
jupyterhubkubeblocksVerified publisher0.1.01 of 7See more

jupyterhub kubeblocks 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
pymysql@1.1.0
1.1.1

Open the chart page →

7,356
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
pymysql@0.9.2
1.1.1

Open the chart page →

18,316
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
pymysql@0.10.1
1.1.1

Open the chart page →

6,611
phonebook-chartmy-phonebook-chart0.1.02 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:1.008e10f9c0f53
pymysql@1.1.0
1.1.1
ahmetgrbzz/web_server:1.02e7fef69c29f
pymysql@1.1.0
1.1.1

Open the chart page →

3,034
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
pymysql@0.10.1
1.1.1

Open the chart page →

5,456
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
pymysql@1.0.2
1.1.1

Open the chart page →

22,084
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pymysql@0.9.3
python-pymysql@0.9.3-2ubuntu3
1.1.1
0.9.3-2ubuntu3.1

Open the chart page →

30,687
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
pymysql@0.9.3
1.1.1

Open the chart page →

18,756
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pymysql@1.0.2
1.1.1

Open the chart page →

8,607
phonebook-chartusuladams2Verified publisher0.2.12 of 3See more

phonebook-chart usuladams2 0.2.1

2 of the 3 container images this version deploys carry CVE-2024-36039.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
pymysql@1.0.2
1.1.1
paulkellerman/webserver-app:latest5a37b74f61b9
pymysql@1.0.2
1.1.1

Open the chart page →

3,176

Container images carrying it

45 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
paulkellerman/resultserver-app:1.0381eeccb0618
pymysql@1.0.2
1.1.1
3
paulkellerman/webserver-app:latest5a37b74f61b9
pymysql@1.0.2
1.1.1
3
larribas/mlflow:1.9.105ccb0b46bfb
pymysql@0.9.3
1.1.1
2
ahmetgrbzz/result_server:1.008e10f9c0f53
pymysql@1.1.0
1.1.1
1
ahmetgrbzz/result_server:2.035c37ae2bafd
pymysql@1.1.0
1.1.1
1
ahmetgrbzz/web_server:1.02e7fef69c29f
pymysql@1.1.0
1.1.1
1
ahmetgrbzz/web_server:2.0f018bafd2b0c
pymysql@1.1.0
1.1.1
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
pymysql@1.1.0
1.1.1
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
pymysql@1.1.0
1.1.1
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
pymysql@1.1.0
1.1.1
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
pymysql@1.0.3
1.1.1
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
pymysql@1.1.0
1.1.1
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
pymysql@1.1.0
1.1.1
1
assistiot/traffic-classification_api:2.0.0e32b87786142
pymysql@1.1.0
1.1.1
1
behnambm/docker-sample:v1bd3ad88afff9
pymysql@1.1.0
1.1.1
1
buntha/mlflow:2.1.1154542cc3083
pymysql@1.0.2
1.1.1
1
datadog/agent:7.22.08f20e56b5311
pymysql@0.9.3
1.1.1
1
datadog/agent:6aad9994de6a7
pymysql@0.10.1
1.1.1
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
pymysql@0.9.2
1.1.1
1
douz/helpdesk:latest4384103d0219
pymysql@1.0.2
1.1.1
1
evk02/mlflow:2.2.1ef6ff257ef35
pymysql@0.10.1
1.1.1
1
gluufederation/opendj:4.3.0_011a1128b28b95
pymysql@1.0.2
1.1.1
1
hhyo/archery:v1.9.11aa41843419e
pymysql@0.9.3
1.1.1
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
pymysql@1.0.2
1.1.1
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pymysql@1.0.2
1.1.1
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
pymysql@1.1.0
1.1.1
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pymysql@0.10.1
1.1.1
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pymysql@1.0.2
1.1.1
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
pymysql@1.0.2
1.1.1
1
kfirfer/percona-xtradb-healthcheck:0.0.1ef7b909a8e6b
pymysql@0.10.1
1.1.1
1
librenms/librenms:22.4.14f1f3d667cc7
pymysql@1.0.2
1.1.1
1
lsstsqre/squash-api:0.5.34879415ec6ac
pymysql@0.10.1
1.1.1
1
mozilla/syncserver:latest016162bf39d8
pymysql@0.9.3
1.1.1
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
pymysql@1.1.0
1.1.1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
pymysql@1.0.2
1.1.1
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
pymysql@1.0.2
1.1.1
1
seafileltd/seafile-mc:9.0.106693911bcc40
pymysql@1.0.2
1.1.1
1
seafileltd/seafile-mc:10.0.170628f29c663
pymysql@1.0.3
1.1.1
1
seafileltd/seafile-mc:9.0.97ac833196f60
pymysql@1.0.2
1.1.1
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
pymysql@1.0.2
1.1.1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pymysql@0.9.3
python-pymysql@0.9.3-2ubuntu3
1.1.1
0.9.3-2ubuntu3.1
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
pymysql@0.9.3
1.1.1
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
pymysql@1.1.0
1.1.1
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
pymysql@1.1.0
1.1.1
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pymysql@1.0.2
1.1.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.