sidorares/node-mysql2 Security Advisories | GitStock

high2026-09-01

MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials

GHSA-3f6p-5ww8-9rcr

medium2026-08-31

MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS

GHSA-rgwj-5xj2-c3m3

high2024-05-30

mysql2 vulnerable to Prototype Pollution

GHSA-pmh2-wpjm-fj45 · CVE-2024-21512

critical2024-04-23

MySQL2 for Node Arbitrary Code Injection

GHSA-4rch-2fh8-94vw · CVE-2024-21511

critical2024-04-11

mysql2 Remote Code Execution (RCE) via the readCodeFor function

GHSA-fpw7-j2hg-69v5 · CVE-2024-21508

medium2024-04-10

mysql2 cache poisoning vulnerability

GHSA-mqr2-w7wj-jjgr · CVE-2024-21507

medium2024-04-10

mysql2 vulnerable to Prototype Poisoning

GHSA-49j4-86m8-q2jw · CVE-2024-21509