proxysql vulnerabilities

CVEs whose affected-version data names the proxysql package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102664High· 7.1

3d ago

ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib path

ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and 4.0.10, decompress_mysql_payload() in lib/mysql_data_stream.cpp accepts a zlib stream when uncompress() returns Z_OK without checking that t…

▾ Twilightsysown · proxysqlEPSS 0.30%via CVEORG