p PatchFirst

CVE-2024-21512

CVE-2024-21512

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.

CVSS 8.2 · High · EPSS 3.1% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • mysql2

    Versions
    • ≥ 0, < 3.9.8: Affected (semver)

    Update to 3.9.8

  • org.webjars.npm:mysql2

    Versions
    • ≥ 0: Affected (semver)

    No fix published

  • mysql2 npm

    Affected ranges
    • SEMVER: < 3.9.8

    Update to 3.9.8

Original sources

Check your server →