CVE-2024-21512
mysql2 vulnerable to Prototype Pollution
Résumé
mysql2 vulnerable to Prototype Pollution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
mysql2
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.8"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web gist.github.com
- web security.snyk.io
- web security.snyk.io