CVE-2024-21507
1 advisory.
npm/mysql2 CVE-2024-21507: medium 6.5
mysql2 cache poisoning vulnerability
Action: Upgrade mysql2 to 3.9.3 or later.
npm i mysql2@3.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.9.3 | - |
Fixed versions
| 3.9.3 |
Sources
- osv: GHSA-mqr2-w7wj-jjgr
- https://nvd.nist.gov/vuln/detail/CVE-2024-21507
- https://github.com/sidorares/node-mysql2/pull/2424
- https://github.com/sidorares/node-mysql2/commit/0d54b0ca6498c823098426038162ef10df02c818
- https://blog.slonser.info/posts/mysql2-attacker-configuration
- https://github.com/sidorares/node-mysql2
- https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6591300
CVE-2024-21507 · published · modified · JSON