CVE-2024-9774

Publication date 27 December 2024

Last updated 11 July 2025

Ubuntu priority

Cvss 3 Severity Score

A vulnerability was found in python-sql where unary operators do not escape non-Expression.

Show unmaintained releases

Package	Ubuntu Release	Status
python-sql	26.04 LTS resolute	Not affected
	25.10 questing	Not affected
	25.04 plucky	Not affected
	24.10 oracular	Ignored end of life, was needs-triage
	24.04 LTS noble	Vulnerable
	22.04 LTS jammy	Vulnerable
	20.04 LTS focal	Vulnerable
	18.04 LTS bionic	Vulnerable
	16.04 LTS xenial	Vulnerable

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
python-sql	Upstream: f20551b

CVSS version: CVSS v3.0

Base score 6.5 · Medium

Base metrics

Scores