py-mysql-connector-python -- Vulnerability in the MySQL Connectors product of Oracle MySQL

2025-10-01 · CVE-2025-21548 · VuXML entry

Oracle reports: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this …

Affected versions

• py39-mysql-connector-python, py310-mysql-connector-python, py311-mysql-connector-python, py312-mysql-connector-python < 9.2.0

By system

1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.