{"action":"Upgrade mysql to 2.14.0 or later.","affected":[{"fixed":"2.14.0","introduced":"2.0.0-alpha8"}],"component":"mysql","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.14.0"],"ghsa_id":"GHSA-5f7m-mmpc-qhh4","id":"tcs_01M5KF3E48DG0RD6Q933635KQ9","modified_at":"2022-08-03T20:30:06Z","published_at":"2019-05-23T09:27:00Z","references":["https://osv.dev/vulnerability/GHSA-5f7m-mmpc-qhh4","https://github.com/mysqljs/mysql/commit/192fe45593ba5768534afb6f2154432ca67a5002","https://github.com/mysqljs/mysql/commit/310c6a7d1b2e14b63b572dbfbfa10128f20c6d52","https://github.com/mysqljs/mysql","https://www.npmjs.com/advisories/602"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-5f7m-mmpc-qhh4","url":"https://osv.dev/vulnerability/GHSA-5f7m-mmpc-qhh4"}],"summary":"mysql Node.JS Module Vulnerable to Remote Memory Exposure"}