ROOT-APP-NPM-AIKIDO-2024-10037 AIKIDO-2024-10037 in mysql2 - Patched by Root

Root has patched AIKIDO-2024-10037 in the mysql2 package for Root:npm. Multiple fixed versions available...

CLSA-2026-1773879450 TuxCare security update for mysql2 (1 CVE)

TuxCare rebuilt mysql2 to address 1 CVE. Fixed in 2.3.3-tuxcare.3...

Prototype Pollution

Overview mysql2 is a mostly API compatible with mysqljs and supports majority of features. Affected versions of this package are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables. PoC js const mysql = require'mysql2'; const...