Read the docs

Sidorares

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Sidorares records in CISA KEV

No Sidorares vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mysql2 2 records HIGH

Records

2 records

TI-2024-14265 CVE-2024-21509 · GHSA-49j4-86m8-q2jw

Prototype pollution in mysql2

Priority HIGH 68

Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser.j…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00955 Published 2024-04-10 Fixed in 3.9.4 CWE-1321
TI-2024-14263 CVE-2024-21507 · GHSA-mqr2-w7wj-jjgr

Improper input validation in mysql2

Priority HIGH 68

Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields function, resulting in cache poisoning.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00744 Published 2024-04-10 Fixed in 3.9.3 CWE-20
Open these records in search →