CVE-2024-21512

8.2 HIGH

Published: May 29, 2024 Modified: April 15, 2026

Description

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://gist.github.com/domdomi3/e9f0f9b9b1ed6bfbbc0bea87c5ca1e4a

Source: report@snyk.io

https://github.com/sidorares/node-mysql2/commit/efe3db527a2c94a63c2d14045baba8dfefe922bc

Source: report@snyk.io

https://github.com/sidorares/node-mysql2/pull/2702

Source: report@snyk.io

https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-7176010

Source: report@snyk.io

https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6861580

Source: report@snyk.io

https://gist.github.com/domdomi3/e9f0f9b9b1ed6bfbbc0bea87c5ca1e4a