A vulnerability was found in mysql2 up to 3.9.6. It has been rated as very critical. Affected by this issue is the function readCodeFor. The manipulation of the argument timezone leads to code injection.

This vulnerability is handled as CVE-2024-21511. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.