https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T20:18:13.136793+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11292 cnvd-2018-11292 2026-10-16T20:18:13.140547+00:00 cnvd-2018-11292 https://cve.radiocsirt.org/vuln/euvd-2026-164686 EUVD-2026-164686 2026-10-16T20:18:13.140584+00:00 EUVD-2026-164686 https://cve.radiocsirt.org/vuln/fkie_cve-2015-9244 fkie_cve-2015-9244 2026-10-16T20:18:13.140599+00:00

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

 https://cve.radiocsirt.org/vuln/ghsa-fvq6-55gv-jx9f GHSA-fvq6-55gv-jx9f — SQL Injection in mysql 2026-10-16T20:18:13.140628+00:00

Affected: npm: mysql

Versions of `mysql` prior to 2.0.0-alpha8 are affected by a SQL Injection vulnerability in the `mysql.escape()` function, which does not properly escape object keys.

## Recommendation

Update to version 2.0.0-alpha8 or later.

 https://cve.radiocsirt.org/vuln/gsd-2015-9244 gsd-2015-9244 2026-10-16T20:18:13.140654+00:00 gsd-2015-9244 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-9244 Withdrawn: UBUNTU-CVE-2015-9244 2026-10-16T20:18:13.140667+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: node-mysql

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.