renovate #82

m.schnitzler · 2026-03-10T00:44:11Z

m.schnitzler commented

2026-03-10 00:44:11 +00:00

npm

mysql2

^3.19.0 => ^3.19.1 (dvf)

3.19.1 (2026-03-09)

Security Bug Fixes

bound null-terminated string read to packet end (fixes a potential OOB read reported by Doruk Tan Ozturk (peaktwilight)) (#4161) (91c5229)

handle malformed geometry payloads (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#4164) (1869215)

prevent query param override of URL-defined connection options (fixes a potential config injection vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#4162) (3123b4e)

validate buffer bounds in geometry parser (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#4159) (7c2ae00)

<h1>npm</h1> <h2>mysql2</h2> <ul> <li> ^3.19.0 => ^3.19.1 (dvf)</li> </ul> > <h2><a href="https://github.com/sidorares/node-mysql2/compare/v3.19.0...v3.19.1">3.19.1</a> (2026-03-09)</h2> > <h3>Security Bug Fixes</h3> > <ul> > <li>bound <code>null</code>-terminated string read to packet end (fixes a potential OOB read reported by Doruk Tan Ozturk (peaktwilight)) (<a href="https://github.com/sidorares/node-mysql2/issues/4161">#4161</a>) (<a href="https://github.com/sidorares/node-mysql2/commit/91c5229dff2293953635b93f753b45bff31deac4">91c5229</a>)</li> > <li>handle malformed geometry payloads (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (<a href="https://github.com/sidorares/node-mysql2/issues/4164">#4164</a>) (<a href="https://github.com/sidorares/node-mysql2/commit/186921573096f5b9feccef93cf61f335e5372080">1869215</a>)</li> > <li>prevent query param override of <code>URL</code>-defined connection options (fixes a potential config injection vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (<a href="https://github.com/sidorares/node-mysql2/issues/4162">#4162</a>) (<a href="https://github.com/sidorares/node-mysql2/commit/3123b4e686e4e7c3893b20773376aff2c31840f7">3123b4e</a>)</li> > <li>validate buffer bounds in geometry parser (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (<a href="https://github.com/sidorares/node-mysql2/issues/4159">#4159</a>) (<a href="https://github.com/sidorares/node-mysql2/commit/7c2ae002a5e1708d0a0a757bedd00c7e16ae2eee">7c2ae00</a>)</li> > </ul>

m.schnitzler added 1 commit 2026-03-10 00:44:12 +00:00

fix: "renovate" 7f84e6cc21

root merged commit e06837ae0e into master

2026-03-10 00:44:45 +00:00

root referenced this issue from a commit

2026-03-10 00:44:55 +00:00

renovate (#82)

root deleted branch renovate

2026-03-10 00:44:59 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: root/dvf#82