Packagist / PACKAGE INTELLIGENCE

neuron-core/neuron-ai

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

critical9.4

GHSA-898v-775g-777cFix available

Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

Packagist / neuron-core/neuron-ai

09 Dec

neuron-core/neuron-ai Packagist

Ecosystem versions

Earlier releases before 2.8.12

Fixed in 2.8.12

307 explicitly affected versions

1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.10.0, 1.10.1, 1.10.10, 1.10.11, 1.10.12, 1.10.13, 1.10.14, 1.10.15, 1.10.16, 1.10.17, 1.10.18, 1.10.19, 1.10.2, 1.10.20, 1.10.3, 1.10.4, 1.10.5, 1.10.6, 1.10.7, 1.10.8, 1.10.9, 1.11.0, 1.11.1, 1.11.10, 1.11.2, 1.11.3, 1.11.4, 1.11.5, 1.11.6, 1.11.7, 1.11.8, 1.11.9, 1.12.0, 1.12.1, 1.12.10, 1.12.11, 1.12.12, 1.12.13, 1.12.14, 1.12.15, 1.12.16, 1.12.17, 1.12.18, 1.12.2, 1.12.3, 1.12.4, 1.12.5, 1.12.6, 1.12.7, 1.12.8, 1.12.9, 1.13.0, 1.13.1, 1.13.2, 1.13.3, 1.14.0, 1.14.1, 1.14.10, 1.14.11, 1.14.12, 1.14.13, 1.14.14, 1.14.15, 1.14.16, 1.14.17, 1.14.18, 1.14.19, 1.14.2, 1.14.20, 1.14.21, 1.14.22, 1.14.23, 1.14.24, 1.14.25, 1.14.26, 1.14.27, 1.14.28, 1.14.29, 1.14.3, 1.14.4, 1.14.5, 1.14.6, 1.14.7, 1.14.8, 1.14.9, 1.15.0, 1.15.1, 1.15.10, 1.15.11, 1.15.12, 1.15.13, 1.15.14, 1.15.15, 1.15.16, 1.15.17, 1.15.18, 1.15.19, 1.15.2, 1.15.20, 1.15.21, 1.15.22, 1.15.3, 1.15.4, 1.15.5, 1.15.6, 1.15.7, 1.15.8, 1.15.9, 1.16.0, 1.16.1, 1.16.10, 1.16.11, 1.16.12, 1.16.13, 1.16.14, 1.16.15, 1.16.16, 1.16.17, 1.16.18, 1.16.19, 1.16.2, 1.16.20, 1.16.21, 1.16.22, 1.16.23, 1.16.3, 1.16.4, 1.16.5, 1.16.6, 1.16.7, 1.16.8, 1.16.9, 1.17.0, 1.17.1, 1.17.2, 1.17.3, 1.17.4, 1.17.5, 1.17.6, 1.2.0, 1.2.1, 1.2.10, 1.2.11, 1.2.12, 1.2.13, 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19, 1.2.2, 1.2.20, 1.2.21, 1.2.22, 1.2.23, 1.2.24, 1.2.25, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9, 1.3.0, 1.3.1, 1.3.2, 1.4.0, 1.4.1, 1.4.2, 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.6.0, 1.7.0, 1.7.1, 1.7.2, 1.8.0, 1.8.1, 1.8.10, 1.8.11, 1.8.12, 1.8.13, 1.8.14, 1.8.15, 1.8.16, 1.8.17, 1.8.18, 1.8.19, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.8.9, 1.9.0, 1.9.1, 1.9.10, 1.9.11, 1.9.12, 1.9.13, 1.9.14, 1.9.15, 1.9.16, 1.9.17, 1.9.18, 1.9.19, 1.9.2, 1.9.20, 1.9.21, 1.9.22, 1.9.23, 1.9.24, 1.9.25, 1.9.26, 1.9.27, 1.9.28, 1.9.29, 1.9.3, 1.9.30, 1.9.31, 1.9.32, 1.9.33, 1.9.34, 1.9.35, 1.9.36, 1.9.37, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8, 1.9.9, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.10, 2.2.11, 2.2.12, 2.2.13, 2.2.14, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.2.8, 2.2.9, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.7.0, 2.8.0, 2.8.1, 2.8.10, 2.8.11, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9

View affected-version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "2.8.12"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "1.0.0",
    "1.0.1",
    "1.1.0",
    "1.1.1",
    "1.1.2",
    "1.1.3",
    "1.10.0",
    "1.10.1",
    "1.10.10",
    "1.10.11",
    "1.10.12",
    "1.10.13",
    "1.10.14",
    "1.10.15",
    "1.10.16",
    "1.10.17",
    "1.10.18",
    "1.10.19",
    "1.10.2",
    "1.10.20",
    "1.10.3",
    "1.10.4",
    "1.10.5",
    "1.10.6",
    "1.10.7",
    "1.10.8",
    "1.10.9",
    "1.11.0",
    "1.11.1",
    "1.11.10",
    "1.11.2",
    "1.11.3",
    "1.11.4",
    "1.11.5",
    "1.11.6",
    "1.11.7",
    "1.11.8",
    "1.11.9",
    "1.12.0",
    "1.12.1",
    "1.12.10",
    "1.12.11",
    "1.12.12",
    "1.12.13",
    "1.12.14",
    "1.12.15",
    "1.12.16",
    "1.12.17",
    "1.12.18",
    "1.12.2",
    "1.12.3",
    "1.12.4",
    "1.12.5",
    "1.12.6",
    "1.12.7",
    "1.12.8",
    "1.12.9",
    "1.13.0",
    "1.13.1",
    "1.13.2",
    "1.13.3",
    "1.14.0",
    "1.14.1",
    "1.14.10",
    "1.14.11",
    "1.14.12",
    "1.14.13",
    "1.14.14",
    "1.14.15",
    "1.14.16",
    "1.14.17",
    "1.14.18",
    "1.14.19",
    "1.14.2",
    "1.14.20",
    "1.14.21",
    "1.14.22",
    "1.14.23",
    "1.14.24",
    "1.14.25",
    "1.14.26",
    "1.14.27",
    "1.14.28",
    "1.14.29",
    "1.14.3",
    "1.14.4",
    "1.14.5",
    "1.14.6",
    "1.14.7",
    "1.14.8",
    "1.14.9",
    "1.15.0",
    "1.15.1",
    "1.15.10",
    "1.15.11",
    "1.15.12",
    "1.15.13",
    "1.15.14",
    "1.15.15",
    "1.15.16",
    "1.15.17",
    "1.15.18",
    "1.15.19",
    "1.15.2",
    "1.15.20",
    "1.15.21",
    "1.15.22",
    "1.15.3",
    "1.15.4",
    "1.15.5",
    "1.15.6",
    "1.15.7",
    "1.15.8",
    "1.15.9",
    "1.16.0",
    "1.16.1",
    "1.16.10",
    "1.16.11",
    "1.16.12",
    "1.16.13",
    "1.16.14",
    "1.16.15",
    "1.16.16",
    "1.16.17",
    "1.16.18",
    "1.16.19",
    "1.16.2",
    "1.16.20",
    "1.16.21",
    "1.16.22",
    "1.16.23",
    "1.16.3",
    "1.16.4",
    "1.16.5",
    "1.16.6",
    "1.16.7",
    "1.16.8",
    "1.16.9",
    "1.17.0",
    "1.17.1",
    "1.17.2",
    "1.17.3",
    "1.17.4",
    "1.17.5",
    "1.17.6",
    "1.2.0",
    "1.2.1",
    "1.2.10",
    "1.2.11",
    "1.2.12",
    "1.2.13",
    "1.2.14",
    "1.2.15",
    "1.2.16",
    "1.2.17",
    "1.2.18",
    "1.2.19",
    "1.2.2",
    "1.2.20",
    "1.2.21",
    "1.2.22",
    "1.2.23",
    "1.2.24",
    "1.2.25",
    "1.2.3",
    "1.2.4",
    "1.2.5",
    "1.2.6",
    "1.2.7",
    "1.2.8",
    "1.2.9",
    "1.3.0",
    "1.3.1",
    "1.3.2",
    "1.4.0",
    "1.4.1",
    "1.4.2",
    "1.5.0",
    "1.5.1",
    "1.5.2",
    "1.5.3",
    "1.5.4",
    "1.6.0",
    "1.7.0",
    "1.7.1",
    "1.7.2",
    "1.8.0",
    "1.8.1",
    "1.8.10",
    "1.8.11",
    "1.8.12",
    "1.8.13",
    "1.8.14",
    "1.8.15",
    "1.8.16",
    "1.8.17",
    "1.8.18",
    "1.8.19",
    "1.8.2",
    "1.8.3",
    "1.8.4",
    "1.8.5",
    "1.8.6",
    "1.8.7",
    "1.8.8",
    "1.8.9",
    "1.9.0",
    "1.9.1",
    "1.9.10",
    "1.9.11",
    "1.9.12",
    "1.9.13",
    "1.9.14",
    "1.9.15",
    "1.9.16",
    "1.9.17",
    "1.9.18",
    "1.9.19",
    "1.9.2",
    "1.9.20",
    "1.9.21",
    "1.9.22",
    "1.9.23",
    "1.9.24",
    "1.9.25",
    "1.9.26",
    "1.9.27",
    "1.9.28",
    "1.9.29",
    "1.9.3",
    "1.9.30",
    "1.9.31",
    "1.9.32",
    "1.9.33",
    "1.9.34",
    "1.9.35",
    "1.9.36",
    "1.9.37",
    "1.9.4",
    "1.9.5",
    "1.9.6",
    "1.9.7",
    "1.9.8",
    "1.9.9",
    "2.0.0",
    "2.0.1",
    "2.0.2",
    "2.0.3",
    "2.0.4",
    "2.0.5",
    "2.0.6",
    "2.0.7",
    "2.0.8",
    "2.1.0",
    "2.1.1",
    "2.2.0",
    "2.2.1",
    "2.2.10",
    "2.2.11",
    "2.2.12",
    "2.2.13",
    "2.2.14",
    "2.2.2",
    "2.2.3",
    "2.2.4",
    "2.2.5",
    "2.2.6",
    "2.2.7",
    "2.2.8",
    "2.2.9",
    "2.3.0",
    "2.3.1",
    "2.3.2",
    "2.3.3",
    "2.3.4",
    "2.3.5",
    "2.4.0",
    "2.4.1",
    "2.4.2",
    "2.4.3",
    "2.4.4",
    "2.5.4",
    "2.5.5",
    "2.5.6",
    "2.5.7",
    "2.5.8",
    "2.6.0",
    "2.6.1",
    "2.6.2",
    "2.6.3",
    "2.6.4",
    "2.6.5",
    "2.6.6",
    "2.6.7",
    "2.7.0",
    "2.8.0",
    "2.8.1",
    "2.8.10",
    "2.8.11",
    "2.8.2",
    "2.8.3",
    "2.8.4",
    "2.8.5",
    "2.8.6",
    "2.8.7",
    "2.8.8",
    "2.8.9"
  ]
}

high8.2

GHSA-j8g6-5gqc-mq36Fix available

Neuron MySQLSelectTool “read-only” bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)