@amokrushin/zongji (0.5.1-patch.1), @breautek/storm (1.2.0-beta.0) +71 more potentially affected by CVE-2019-14939 via mysql (2.17.1)

mysql NPM version 2.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on mysql and may be impacted: - @amokrushin/zongji 0.5.1-patch.1 - @breautek/storm 1.2.0-beta.0 - @cenkingunlugu/mysql-events =0.6.0, =0.0.2, =1.0.0, =1.0.25, =1.0.22, =0.0.1, =1.4.1...

UBUNTU-CVE-2019-14939

An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default...

CVE-2019-14939

CVE-2019-14939 affects the mysqljs/mYSQL module for Node.js (version 2.17.1). The issue is that the LOAD DATA LOCAL INFILE option is enabled by default, enabling potential exposure of data via local file loading. The CVSS3 vector indicates LOCAL attack vector, LOW complexity, with LOW privileges ...