CVE-2024-21512
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables...
Summary
mysql2 vulnerable to Prototype Pollution
Original description
The description as published by the source.
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
mysql2
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.8"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- patch github.com
- web gist.github.com
- web security.snyk.io
- web security.snyk.io