CVE-2015-9244

9.8

CRITICALCVSS v3

Published

May 29, 2018

CVSS v2

7.5 HIGH

Affected

7 projects

Assigned by

[email protected]

Severity scale

010

Description

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

mysql

NPMA node.js driver for mysql. It is written in JavaScript, does not require compiling, and is 100% MIT licensed.

<= 0.9.6, = 2.0.0NVD

@keyv/mysql

NPMMySQL/MariaDB storage adapter for Keyv

<= 0.9.6, = 2.0.0NVD

@types/mysql

NPM

More on this CVE

NVD↗GitHub Advisory↗

TypeScript definitions for mysql

<= 0.9.6, = 2.0.0NVD

mysqljs/mysql

GitHubA pure node.js JavaScript Client implementing the MySQL protocol.

<= 0.9.6, = 2.0.0NVD

mysql

RubyGemsThis is the MySQL API module for Ruby. It provides the same functions for Ruby programs that the MySQL C API provides for C programs. This package is offered as gem for easy installation using RubyGems. It wraps unmodified tmtm's mysql-ruby extension into a proper gem. Please note that tmtm (Tomita Mashahiro) has deprecated development of this extension and only update it for bug fixes.

<= 0.9.6, = 2.0.0NVD

mysql

Python Package IndexVirtual package for MySQL-python

<= 0.9.6, = 2.0.0NVD

mysql

Crates.ioMysql client library implemented in rust

<= 0.9.6, = 2.0.0NVD

Security Advisories

CVE-2015-9244

Description

More on this CVE