Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Sidorares Component: Mysql2 Clear all filters
TI-2024-14263 CVE-2024-21507 · GHSA-mqr2-w7wj-jjgr

Improper input validation in mysql2

Priority HIGH 68

Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields function, resulting in cache poisoning.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00744 Published 2024-04-10 Fixed in 3.9.3 CWE-20
TI-2024-14265 CVE-2024-21509 · GHSA-49j4-86m8-q2jw

Prototype pollution in mysql2

Priority HIGH 68

Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser.j…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00955 Published 2024-04-10 Fixed in 3.9.4 CWE-1321