# Oracle Mysql Server


- [CVE-2022-1292](https://insights.sbomify.com/CVE-2022-1292/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2021-3711](https://insights.sbomify.com/CVE-2021-3711/): SM2 Decryption Buffer Overflow (critical 9.8)
- [CVE-2019-5481](https://insights.sbomify.com/CVE-2019-5481/): Use after free in curl (critical 9.8)
- [CVE-2019-5482](https://insights.sbomify.com/CVE-2019-5482/): Memory corruption in curl (critical 9.8)
- [CVE-2021-22945](https://insights.sbomify.com/CVE-2021-22945/): Use after free in https://github.com/curl/curl (critical 9.1)
- [CVE-2026-60163](https://insights.sbomify.com/CVE-2026-60163/): Privilege escalation in MySQL Cluster (high 8.4)
- [CVE-2026-60315](https://insights.sbomify.com/CVE-2026-60315/): Information disclosure in MySQL Cluster (high 8.2)
- [CVE-2022-21824](https://insights.sbomify.com/CVE-2022-21824/): Other in Node (high 8.2)
- [CVE-2026-101772](https://insights.sbomify.com/CVE-2026-101772/): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). (high 8.1)
- [CVE-2022-27778](https://insights.sbomify.com/CVE-2022-27778/): Other in https://github.com/curl/curl (high 8.1)
- [CVE-2021-22901](https://insights.sbomify.com/CVE-2021-22901/): curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session t (high 8.1)
- [CVE-2019-5443](https://insights.sbomify.com/CVE-2019-5443/): Code injection in curl (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/mysql-server/