Weiheng Qiu

**Name of the Vulnerable Software and Affected Versions** MySQL Router versions 9.0.0 through 9.7.0 **Description** An issue in the General component of MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of MySQL Router. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MySQL Server versions 8.0.0 through 8.0.42 **Description** A flaw exists in the Oracle MySQL Server Replication component that allows a high-privileged attacker with network access to cause a denial-of-service (DoS) condition, resulting in a hang or frequent crashes of the MySQL Server. **Recommendations** Update MySQL Server to a version later than 8.0.42.