mysql2
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS | mysql2 | npm | Medium | Fix reported | |
| MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials | mysql2 | npm | High | Fix reported | |
| mysql2 cache poisoning vulnerability | mysql2 | npm | Medium | Fix reported | |
| mysql2 vulnerable to Prototype Poisoning | mysql2 | npm | Medium | Fix reported | |
| MySQL2 for Node Arbitrary Code Injection | mysql2 | npm | Critical | Fix reported | |
| mysql2 Remote Code Execution (RCE) via the readCodeFor function | mysql2 | npm | Critical | Fix reported | |
| mysql2 vulnerable to Prototype Pollution | mysql2 | npm | High | Fix reported |