Skip to content
OpenAdvisories

Package · npm

mysql2

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    GHSA-3f6p-5ww8-9rcr

    MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials

    ## Summary A rogue MySQL server (or MITM) can force mysql2 to send credentials in **plaintext** by requesting an auth switch to `mysql_clear_password`. The driver complies without verifying that TLS is active. ## Details `mysql_clear_password` is registered a…

    mysql2 npm
  • High 8.2
    CVE-2024-21512

    mysql2 vulnerable to Prototype Pollution

    Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.

    sqlpad sqlpad-compat mysql2 Wolfi npm