CVE-2024-21507

Name of the Vulnerable Software and Affected Versions mysql2 versions prior to 3.9.3

Description The issue is related to Improper Input Validation through the keyFromFields function, resulting in cache poisoning. An attacker can inject a colon : character within a value of the attacker-crafted key.

Recommendations For versions prior to 3.9.3, update to version 3.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the input to the keyFromFields function to prevent the injection of malicious characters.