4 matches found
GHSA-MQR2-W7WJ-JJGR mysql2 cache poisoning vulnerability
Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields function, resulting in cache poisoning. An attacker can inject a colon : character within a value of the attacker-crafted key...
6.9CVSS5.9AI score0.00744EPSS
SaveExploits1References6
20