Skip to content

chore(deps): update dependency mysql2 to v3.19.1#686

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/mysql2-3.x-lockfile
Mar 9, 2026
Merged

chore(deps): update dependency mysql2 to v3.19.1#686
renovate[bot] merged 1 commit intomainfrom
renovate/mysql2-3.x-lockfile

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 9, 2026

This PR contains the following updates:

Package Change Age Confidence
mysql2 (source) 3.19.03.19.1 age confidence

Release Notes

sidorares/node-mysql2 (mysql2)

v3.19.1

Compare Source

Bug Fixes
  • bound null-terminated string read to packet end (fixes a potential OOB read reported by Doruk Tan Ozturk (peaktwilight)) (#​4161) (91c5229)
  • handle malformed geometry payloads (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#​4164) (1869215)
  • prevent query param override of URL-defined connection options (fixes a potential config injection vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#​4162) (3123b4e)
  • validate buffer bounds in geometry parser (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#​4159) (7c2ae00)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 11:59 PM ( * 0-23 * * * ) in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate labels Mar 9, 2026
@renovate renovate Bot merged commit 5a0897d into main Mar 9, 2026
4 checks passed
@renovate renovate Bot deleted the renovate/mysql2-3.x-lockfile branch March 9, 2026 21:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants