[Snyk] Upgrade mysql2 from 3.6.0 to 3.15.1

[HelenaMission]

Snyk has created this PR to upgrade mysql2 from 3.6.0 to 3.15.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 62 versions ahead of your current version.

• The recommended version was released 25 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Poisoning SNYK-JS-MYSQL2-6591084	646	Proof of Concept
	Remote Code Execution (RCE) SNYK-JS-MYSQL2-6591085	646	Proof of Concept
	Use of Web Browser Cache Containing Sensitive Information SNYK-JS-MYSQL2-6591300	646	Proof of Concept
	Arbitrary Code Injection SNYK-JS-MYSQL2-6670046	646	Proof of Concept
	Prototype Pollution SNYK-JS-MYSQL2-6861580	646	Proof of Concept

Release notes

Package name: mysql2

• 3.15.1 - 2025-09-24
  

  3.15.1 (2025-09-24)

  Bug Fixes

  • typings: fix missing callback to PoolCluster.end() (#3819) (53a9bc2)
• 3.15.1-canary.53a9bc24 - 2025-09-24
• 3.15.1-canary.288d757b - 2025-09-18
• 3.15.0 - 2025-09-16
  

  3.15.0 (2025-09-16)

  Features

  • gracefully end pool connections #3148 (#3776) (e72247f)
• 3.14.6-canary.e72247f7 - 2025-09-09
• 3.14.5 - 2025-09-08
  

  3.14.5 (2025-09-08)

  Bug Fixes

  • types: restrict StreamOptions.objectMode to true (#3686) (#3784) (c091f1b)
• 3.14.5-canary.c091f1ba - 2025-09-08
• 3.14.4 - 2025-09-01
  

  3.14.4 (2025-09-01)

  Bug Fixes

  • stream: destroy connection when stream errors (#3769) (cc34a83)
  • stream: resume connection when stream errors or is destroyed (#3775) (9642a1e)
  • stream: fix backpressure when using TLS (#1752) (64ea4cd)
• 3.14.4-canary.cc34a833 - 2025-08-27
• 3.14.4-canary.9642a1e5 - 2025-08-27
• 3.14.4-canary.64ea4cdd - 2025-09-01
• 3.14.3 - 2025-07-29
  

  3.14.3 (2025-07-29)

  Bug Fixes

  • resolve parser cache collision with dual typeCast connections (#3644) (ce2ad75)
• 3.14.3-canary.ce2ad75a - 2025-07-26
• 3.14.2 - 2025-07-10
  

  3.14.2 (2025-07-10)

  Bug Fixes

  • pass columnType to readDateTimeString (#3700) (1ee48cc)
• 3.14.2-canary.1ee48cce - 2025-07-10
• 3.14.1 - 2025-04-27
  

  3.14.1 (2025-04-27)

  Bug Fixes

  • Fix for SET NAMES utf8 causing an unknown encoding error (#3551) 0617813
• 3.14.1-canary.9d097f8d - 2025-04-27
• 3.14.1-canary.0617813d - 2025-04-26
• 3.14.0 - 2025-03-20
  

  3.14.0 (2025-03-19)

  Features

  • add RegExp support to PoolCluster (#3451) (2d5050d)
• 3.13.1-canary.2d5050d5 - 2025-03-11
• 3.13.0 - 2025-03-06
  

  3.13.0 (2025-03-06)

  Features

  • support Cloudflare Workers (#2289) (a79253d)
  • disableEval: add static parsers (#3365) (51da653)

  Bug Fixes

  • query: support VECTOR packets in static parser (#3379) (603c246)
  • PromisePoolCluster.of returns PromisePoolCluster instead of PoolNamespace (#3261) (be22202)
• 3.12.1-canary.fe3a11c4 - 2025-03-05
• 3.12.1-canary.e70160b7 - 2025-03-05
• 3.12.1-canary.be22202e - 2025-03-05
• 3.12.1-canary.a79253d1 - 2025-03-06
• 3.12.1-canary.603c2463 - 2025-02-05
• 3.12.1-canary.51da6534 - 2025-02-05
• 3.12.0 - 2024-12-23
• 3.11.6-canary.9a386018 - 2024-12-04
• 3.11.5 - 2024-11-28
• 3.11.5-canary.d5a76e6c - 2024-11-13
• 3.11.5-canary.cdc9415c - 2024-11-15
• 3.11.5-canary.bded4980 - 2024-11-14
• 3.11.4 - 2024-11-05
• 3.11.4-canary.401db79b - 2024-10-31
• 3.11.3 - 2024-09-15
• 3.11.3-canary.81be01b1 - 2024-09-14
• 3.11.2 - 2024-09-11
• 3.11.1 - 2024-09-10
• 3.11.0 - 2024-07-27
• 3.10.3 - 2024-07-15
• 3.10.2 - 2024-07-01
• 3.10.1 - 2024-06-13
• 3.10.0 - 2024-05-30
• 3.9.9 - 2024-05-29
• 3.9.8 - 2024-05-26
• 3.9.7 - 2024-04-21
• 3.9.6 - 2024-04-18
• 3.9.5 - 2024-04-17
• 3.9.4 - 2024-04-09
• 3.9.3 - 2024-03-26
• 3.9.2 - 2024-02-26
• 3.9.1 - 2024-01-29
• 3.9.0 - 2024-01-26
• 3.8.0 - 2024-01-23
• 3.7.1 - 2024-01-17
• 3.7.0 - 2024-01-07
• 3.6.5 - 2023-11-22
• 3.6.4 - 2023-11-21
• 3.6.3 - 2023-11-03
• 3.6.2 - 2023-10-15
• 3.6.1 - 2023-09-09
• 3.6.0 - 2023-08-04

from mysql2 GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs