Package · Debian

node-mysql

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.5

CVE-2019-14939

MySQL for Node.js Unsafe Options

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

mysql node-mysql node-mysql Debian Ubuntu npm

Aug 12, 2019
Medium —

CVE-2015-9244

SQL Injection in mysql

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

HackerOne mysql node module mysql node-mysql Debian npm

May 29, 2018