GHSA-473q-m89c-ghf8Published

MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)

Exact source revision recorded 28 Oct 2026 20:55:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

Explicit identifiers and source references

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

GHSA-473q-m89c-ghf8

osv · GHSA-473q-m89c-ghf8

https://github.com/mysql-net/MySqlConnector/security/advisories/GHSA-473q-m89c-ghf8
https://github.com/mysql-net/MySqlConnector/commit/86503613fe3b72ae26c03dd1ea92f0e1e6e208f9
https://github.com/mysql-net/MySqlConnector
https://github.com/mysql-net/MySqlConnector/releases/tag/2.6.1

Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.