8 matches found
@1px-no/img (>=4.2.3, <=4.2.50), @5minds/processcube_engine (>=15.0.0, <=18.0.0-renovate-aee2c3-lw4ddkx5) +148 more potentially affected by CVE-2024-21512 via mysql2 (>=3.0.0, <=3.9.7)
mysql2 NPM version =3.0.0, =4.2.3, =15.0.0, =1.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =0.62.20 and more Source cves: CVE-2024-21512 Source advisory: OSV:GHSA-PMH2-WPJM-FJ45...
CVE-2024-21512 vulnerabilities
Vulnerabilities for packages: sqlpad...
CVE-2024-21512
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...
CVE-2024-21512
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...
CVE-2024-21512
The CVE (CVE-2024-21512) affects the mysql2 package prior to version 3.9.8. The vulnerability is a Prototype Pollution issue caused by improper user input sanitization when using nestTables, allowing an attacker to manipulate the prototype of objects. Public sources in connected documents corrobo...
CVE-2024-21512
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...
CVE-2024-21512
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...
@1px-no/img (>=4.2.3, <=4.2.50), @5minds/processcube_engine (>=15.0.0, <=18.0.0-renovate-aee2c3-lw4ddkx5) +148 more potentially affected by CVE-2024-21512 via mysql2 (>=3.0.0, <=3.9.7)
mysql2 NPM version =3.0.0, =4.2.3, =15.0.0, =1.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =0.62.20 and more Source cves: CVE-2024-21512 Source advisory: SNYK:JS-MYSQL2-6861580...