panthomakos/lynx

Releases3

Frequency2 years 8 months

Last Releaseover 2 years ago

Ruby command line wrapper for MySQL.

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-38165NVD↗	<= 2.8.9	Aug 7, 2021Saturday, 7 August 2021, 18:15	5.3 MEDIUM	2.6 LOW
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.
CVE-2014-5002NVD↗	< 1.0.0	Jan 10, 2018Wednesday, 10 January 2018, 18:29	—	2.1 LOW
The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes.