Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser.js.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Vulnerability Type
CWE-1321
Vulnerability Title
MySQL2 安全漏洞
Vulnerability Description
MySQL2是Andrey Sidorov个人开发者的一个 Node.js 的 MySQL 客户端。 MySQL2 3.9.4之前版本存在安全漏洞，该漏洞源于对用户输入清理不当。
CVSS Information
N/A
Vulnerability Type
N/A