Skip to content

Commit 32767e8

Browse files
committed
fix(security): override mysql2 to patched version >=3.22.0
Adds npm override for mysql2 transitive dependency pulled in by prisma. The vulnerable mysql2@3.15.3 had a high-severity auth downgrade CVE (GHSA-3f6p-5ww8-9rcr). This forces the patched version without downgrading prisma.
1 parent 9316aaf commit 32767e8

2 files changed

Lines changed: 89 additions & 154 deletions

File tree

0 commit comments

Comments
 (0)