@keyv/mysql

@keyv/mysql

Releases61

Frequency1 month 3 weeks

Last Release29 days ago

MySQL/MariaDB storage adapter for Keyv

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2019-14939NVD↗	= 2.17.1	Aug 12, 2019Monday, 12 August 2019, 01:15	—	2.1 LOW
An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.
CVE-2015-9244NVD↗	<= 0.9.6, = 2.0.0	May 29, 2018Tuesday, 29 May 2018, 20:29	9.8 CRITICAL	7.5 HIGH
Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.
CVE-2017-15945NVD↗	< 5.6.36	Oct 27, 2017Friday, 27 October 2017, 21:29	—	7.2 HIGH
The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.