CVE-2019-14939

2.1

LOWCVSS v2

Published

August 12, 2019

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

mysql

NPMA node.js driver for mysql. It is written in JavaScript, does not require compiling, and is 100% MIT licensed.

= 2.17.1NVD

@keyv/mysql

NPMMySQL/MariaDB storage adapter for Keyv

= 2.17.1NVD

@types/mysql

NPM

More on this CVE

NVD↗GitHub Advisory↗

TypeScript definitions for mysql

= 2.17.1NVD

mysqljs/mysql

GitHubA pure node.js JavaScript Client implementing the MySQL protocol.

= 2.17.1NVD

mysql

RubyGemsThis is the MySQL API module for Ruby. It provides the same functions for Ruby programs that the MySQL C API provides for C programs. This package is offered as gem for easy installation using RubyGems. It wraps unmodified tmtm's mysql-ruby extension into a proper gem. Please note that tmtm (Tomita Mashahiro) has deprecated development of this extension and only update it for bug fixes.

= 2.17.1NVD

mysql

Python Package IndexVirtual package for MySQL-python

= 2.17.1NVD

mysql

Crates.ioMysql client library implemented in rust

= 2.17.1NVD

Security Advisories

CVE-2019-14939

Description

More on this CVE