MC
Product
MySQL Cluster
110
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 1High 14Medium 83Low 12
Watch
Add MySQL Cluster to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60163 | 8.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60592 | 8.2 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-60315 | 8.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2022-21824 | 8.2 | Feb 24 | Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously… Affected: through 8.0.29 |
| CVE-2020-8174 | 8.1 | Jul 24 | napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-70724 | 7.5 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-46863 | 7.5 | Jun 16 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling) Affected: 8.0.11 through 8.0.46; 8.4.0 through 8.4.9; 9.0.0 through 9.7.0 |
| CVE-2021-22884 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6” Affected: through 8.0.25 |
| CVE-2021-22883 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established Affected: through 8.0.25 |
| CVE-2020-8277 | 7.5 | Nov 19 | A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1… Affected: through 8.0.23 |
| CVE-2021-44531 | 7.4 | Feb 24 | Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates Affected: through 8.0.29 |
| CVE-2020-8172 | 7.4 | Jun 8 | TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-61094 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60316 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
Showing 14