MC
Product
Mysql Cluster
93
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 67Low 11
Watch
Add Mysql Cluster to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22931 | 9.8 | Aug 16 | Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name… Affected: through 8.0.26 |
| CVE-2026-60163 | 8.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60592 | 8.2 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-60315 | 8.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2022-21824 | 8.2 | Feb 24 | Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously… Affected: through 8.0.29 |
| CVE-2020-8174 | 8.1 | Jul 24 | napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-70724 | 7.5 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-46863 | 7.5 | Jun 16 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling) Affected: 8.0.11 through 8.0.46; 8.4.0 through 8.4.9; 9.0.0 through 9.7.0 |
| CVE-2021-22884 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6” Affected: through 8.0.25 |
| CVE-2021-22883 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established Affected: through 8.0.25 |
| CVE-2020-8277 | 7.5 | Nov 19 | A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1… Affected: through 8.0.23 |
| CVE-2021-44531 | 7.4 | Feb 24 | Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates Affected: through 8.0.29 |
| CVE-2020-8172 | 7.4 | Jun 8 | TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-61094 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60316 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2025-30722 | 6.8 | Apr 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2026-60181 | 6.7 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator) Affected: 9.7.0; 9.7.1 |
| CVE-2025-50068 | 6.7 | Jul 15 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2026-60585 | 6.6 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60178 | 6.6 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-61109 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-61108 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS) Affected: 9.7.0; 9.7.1 |
| CVE-2026-61093 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60718 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60324 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60311 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60174 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-47064 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2025-21575 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21574 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21518 | 6.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 7.6.0 through 7.6.32; 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2024-21177 | 6.5 | Jul 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 7.5.34; 7.6.0 through 7.6.30; 8.0.0 through 8.0.37; 8.1.0 through 8.4.0 |
| CVE-2026-60332 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60331 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60183 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2023-21860 | 6.3 | Jan 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations) Affected: 7.4.0 through 7.4.38; 7.5.0 through 7.5.28; 7.6.0 through 7.6.24; 8.0.0 through 8.0.31 |
| CVE-2022-21550 | 6.3 | Jul 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.36; 7.5.0 through 7.5.26; 7.6.0 through 7.6.22; 8.0.0 through 8.0.29 |
| CVE-2022-21490 | 6.3 | Apr 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.00 through 7.4.35; 7.5.00 through 7.5.25; 7.6.00 through 7.6.21; 8.0.00 through 8.0.28 |
| CVE-2021-35621 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35598 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35594 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35593 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35592 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35590 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2026-60747 | 6.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2022-21519 | 5.9 | Jul 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: through 8.0.29 |
| CVE-2025-30693 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2018-1324 | 5.5 | Mar 16 | A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes… Affected: through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2017-3304 | 5.4 | Apr 24 | Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD) Affected: through 7.2.27; through 7.3.16; through 7.4.14; through 7.5.5 |
| CVE-2021-44532 | 5.3 | Feb 24 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format Affected: through 8.0.29 |
