https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:29:49.546200+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-3779 CVE-2021-3779 — Ruby-MySQL Gem Client File Read 2026-10-08T21:29:50.034882+00:00

Affected: Tomita Masahiro ruby-mysql

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.

 https://cve.radiocsirt.org/vuln/ghsa-73pr-g6jj-5hc9 GHSA-73pr-g6jj-5hc9 — Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql 2026-10-08T21:29:50.034959+00:00

Affected: RubyGems: ruby-mysql

A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide additional data from a local file readable by the client (and not a "local" file on the server).