Approved changes feed: RSS · Atom

cpe:2.3:a:mysql2:mysql2:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMysql2 (2f6cb332-55e0-5aa7-bf84-96957291d2c4)
ProductMysql2 (9d986b28-19ab-5bdc-b86a-0d103b06f54a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21512 vulnerable 2026-06-08 06:27:35.460280 Details available
HIGH (8.2)
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.
Published: 2024-05-29T05:00:01.515Z
Updated: 2024-08-01T22:20:40.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21511 vulnerable 2026-06-08 06:27:35.459858 Details available
CRITICAL (9.8)
Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.
Published: 2024-04-23T05:00:00.602Z
Updated: 2024-08-01T22:20:40.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21508 vulnerable 2026-06-08 06:27:35.457444 Details available
CRITICAL (9.8)
Versions of the package mysql2 before 3.9.4 are vulnerable to Remote Code Execution (RCE) via the readCodeFor function due to improper validation of the supportBigNumbers and bigNumberStrings values.
Published: 2024-04-11T05:00:00.748Z
Updated: 2024-08-01T22:20:40.908Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.