Skip to content

fix: override vulnerable mysql2 dependency - #19

Merged
lmdanavanem merged 1 commit into
mainfrom
chore/override-mysql2
Sep 6, 2026
Merged

fix: override vulnerable mysql2 dependency#19
lmdanavanem merged 1 commit into
mainfrom
chore/override-mysql2

Conversation

@lmdanavanem

Copy link
Copy Markdown
Contributor

Summary

  • override Prisma's vulnerable mysql2 3.15.3 transitive dependency
  • resolve it to mysql2 3.24.3, above the 3.22.0 patched baseline
  • keep the override scoped to the npm dependency graph

Verification

  • Prisma Client generation passed
  • ESLint passed with existing non-blocking warnings
  • production build passed
  • GitHub Quality runs PostgreSQL migrations and all 151 tests

@lmdanavanem
lmdanavanem merged commit 7348245 into main Sep 6, 2026
1 check passed
@lmdanavanem
lmdanavanem deleted the chore/override-mysql2 branch September 6, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant