npm/mysql2: medium 5.9
MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS
Action: Upgrade mysql2 to 3.23.1 or later.
npm i mysql2@3.23.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.23.1 | - |
Fixed versions
| 3.23.1 |
Sources
- osv: GHSA-rgwj-5xj2-c3m3
- https://github.com/sidorares/node-mysql2/security/advisories/GHSA-rgwj-5xj2-c3m3
- https://github.com/sidorares/node-mysql2/commit/7c48343c95ecc80d30d6ebfa67875947b7d848d2
- https://github.com/sidorares/node-mysql2
- https://github.com/sidorares/node-mysql2/releases/tag/v3.23.1
published · modified · JSON