Skip to content
Sign in
6.5 Medium

CVE-2024-21509 Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object…

Description

Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser.js.

Affected products and versions

Product Affected versions Fixed in
mysql2 3.9 earliest → < 3.9.4 3.9.4
mysql2 3.9 earliest → < 3.9.4 3.9.4

Other CVEs of mysql2

The 5 CVEs of mysql2 →
CVE-2024-21512 Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input… 8.2 High CVE-2024-21511 Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of… 9.8 Critical CVE-2024-21508 Versions of the package mysql2 before 3.9.4 are vulnerable to Remote Code Execution (RCE) via the readCodeFor function… 9.8 Critical CVE-2024-21507 Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields… 6.5 Medium
Track this CVE