Mysql2 vulnerabilities
We track 3 vulnerabilities in Mysql2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 29, 2024.
Latest Mysql2 vulnerabilities
- 8.2 High severity
mysql2: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.
- 9.8 Critical severity
mysql2: Improper Control of Generation of Code
Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.
- 9.8 Critical severity
mysql2: Improper Control of Generation of Code
Versions of the package mysql2 before 3.9.4 are vulnerable to Remote Code Execution (RCE) via the readCodeFor function due to improper validation of the supportBigNumbers and bigNumberStrings values.