CGA-9p5m-2fmv-28g4

Published

Last updated

https://images.chainguard.dev/security/CGA-9p5m-2fmv-28g4

Package

sqlpad

Latest Update

Fixed

Fixed Version

7.4.1-r4

Aliases

Severity

9.8

Critical

CVSS V3

Summary

mysql2 Remote Code Execution (RCE) via the readCodeFor function

Description

Versions of the package mysql2 before 3.9.4 are vulnerable to Remote Code Execution (RCE) via the readCodeFor function due to improper validation of the supportBigNumbers and bigNumberStrings values.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-9p5m-2fmv-28g4

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources