{"action":"Upgrade mysql2 to 3.9.8 or later.","affected":[{"fixed":"3.9.8","introduced":"0"}],"component":"mysql2","cve_ids":["CVE-2024-21512"],"ecosystem":"npm","epss":0.03139,"exploited":false,"fixed_versions":["3.9.8"],"ghsa_id":"GHSA-pmh2-wpjm-fj45","id":"tcs_01M5KG402SPV743R7QJH4M5CXH","modified_at":"2026-09-10T03:49:18.750717416Z","published_at":"2024-05-30T18:34:32Z","references":["https://osv.dev/vulnerability/GHSA-pmh2-wpjm-fj45","https://nvd.nist.gov/vuln/detail/CVE-2024-21512","https://github.com/sidorares/node-mysql2/pull/2702","https://github.com/sidorares/node-mysql2/commit/efe3db527a2c94a63c2d14045baba8dfefe922bc","https://gist.github.com/domdomi3/e9f0f9b9b1ed6bfbbc0bea87c5ca1e4a","https://github.com/sidorares/node-mysql2","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-7176010","https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6861580"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-pmh2-wpjm-fj45","url":"https://osv.dev/vulnerability/GHSA-pmh2-wpjm-fj45"}],"summary":"mysql2 vulnerable to Prototype Pollution"}