### Impact
The vulnerability allows unauthenticated execution of arbitrary SQL statements on the database the SQLAlchemyDA instance is connected to. All users are affected.

### Patches
The problem has been patched in version 2.2.

### Workarounds
There is no workaround. All users are urged to upgrade to version 2.2

Affected Packages

PyPI Products.SQLAlchemyDA

Affected versions: 0 (fixed in 2.2)

Related CVEs

CVE-2024-24811

Key Information

GHSA ID

GHSA-r3jc-3qmm-w3pw

Published

February 7, 2024 5:28 PM

Last Modified

February 14, 2024 9:35 PM

CVSS Score

9.0 /10

Primary Ecosystem

PyPI

Primary Package

Products.SQLAlchemyDA

GitHub Reviewed

✓ Yes

Dataset

Last updated: July 13, 2025 6:28 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.