Commit 32767e8
committed
fix(security): override mysql2 to patched version >=3.22.0
Adds npm override for mysql2 transitive dependency pulled in by prisma.
The vulnerable mysql2@3.15.3 had a high-severity auth downgrade CVE
(GHSA-3f6p-5ww8-9rcr). This forces the patched version without
downgrading prisma.1 parent 9316aaf commit 32767e8
2 files changed
Lines changed: 89 additions & 154 deletions
0 commit comments