Skip to content
OpenAdvisories

Package · npm

mysql

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2019-14939

    MySQL for Node.js Unsafe Options

    An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

    mysql node-mysql node-mysql Debian Ubuntu npm
  • Medium —
    GHSA-5f7m-mmpc-qhh4

    mysql Node.JS Module Vulnerable to Remote Memory Exposure

    Versions of `mysql` before 2.14.0 are vulnerable to remove memory exposure. Affected versions of `mysql` package allocate and send an uninitialized memory over the network when a number is provided as a password. Only `mysql` running on Node.js versions below…

    mysql npm
  • Medium —
    CVE-2015-9244

    SQL Injection in mysql

    Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

    HackerOne mysql node module mysql node-mysql Debian npm