MC
Product
MySQL Cluster
110
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 1High 14Medium 83Low 12
Watch
Add MySQL Cluster to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22931 | 9.8 | Aug 16 | Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name… Affected: through 8.0.26 |
| CVE-2026-60163 | 8.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60592 | 8.2 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-60315 | 8.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2022-21824 | 8.2 | Feb 24 | Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously… Affected: through 8.0.29 |
| CVE-2020-8174 | 8.1 | Jul 24 | napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-70724 | 7.5 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-46863 | 7.5 | Jun 16 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling) Affected: 8.0.11 through 8.0.46; 8.4.0 through 8.4.9; 9.0.0 through 9.7.0 |
| CVE-2021-22884 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6” Affected: through 8.0.25 |
| CVE-2021-22883 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established Affected: through 8.0.25 |
| CVE-2020-8277 | 7.5 | Nov 19 | A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1… Affected: through 8.0.23 |
| CVE-2021-44531 | 7.4 | Feb 24 | Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates Affected: through 8.0.29 |
| CVE-2020-8172 | 7.4 | Jun 8 | TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-61094 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60316 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2025-30722 | 6.8 | Apr 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2026-60181 | 6.7 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator) Affected: 9.7.0; 9.7.1 |
| CVE-2025-50068 | 6.7 | Jul 15 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2026-60585 | 6.6 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60178 | 6.6 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-101748 | 6.5 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit) Affected: 8.0.0 through 8.0.49; 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101747 | 6.5 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.49; 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101743 | 6.5 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS) Affected: 26.7.0 through 26.7.1 |
| CVE-2026-101733 | 6.5 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON) Affected: 8.0.0 through 8.0.49; 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-61109 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-61108 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS) Affected: 9.7.0; 9.7.1 |
| CVE-2026-61093 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60718 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60324 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60311 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60174 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-47064 | 6.5 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2025-21575 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21574 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21518 | 6.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 7.6.32; through 8.0.40; through 8.4.3; through 9.1.0 |
| CVE-2024-21230 | 6.5 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 7.5.35; through 7.6.31; through 8.0.39; through 8.4.2; through 9.0.1 |
| CVE-2024-21177 | 6.5 | Jul 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 7.5.34; 7.6.0 through 7.6.30; 8.0.0 through 8.0.37; 8.1.0 through 8.4.0 |
| CVE-2026-60332 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60331 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60183 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2023-21860 | 6.3 | Jan 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations) Affected: 7.4.0 through 7.4.38; 7.5.0 through 7.5.28; 7.6.0 through 7.6.24; 8.0.0 through 8.0.31 |
| CVE-2022-21550 | 6.3 | Jul 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.36; 7.5.0 through 7.5.26; 7.6.0 through 7.6.22; 8.0.0 through 8.0.29 |
| CVE-2022-21490 | 6.3 | Apr 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.00 through 7.4.35; 7.5.00 through 7.5.25; 7.6.00 through 7.6.21; 8.0.00 through 8.0.28 |
| CVE-2021-35621 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35598 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35594 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35593 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35592 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2021-35590 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26 |
| CVE-2026-60747 | 6.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |