benborla29/mcp-server-mysql

v2.0.9 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Data & Storage

✓ No known CVEs patched

This release patches 1 known CVE

Affected surfaces

auth

Summary

AI summary

Updates 🐛 Bug Fixes, 🔒 Security, and 📦 Package across a mixed release.

Full changelog

PII Redaction — New ENABLE_PII_REDACTION flag scrubs emails, phone numbers, SSNs, credit cards, and IPv4 addresses from query results before they reach the LLM. Includes column-name heuristics, regex value scanning, Luhn-verified card masking, SELECT * guard, column-reference guard, and introspection filtering. Opt-in, disabled by default. (by @Morkos)

BIGINT precision loss — New MYSQL_BIG_NUMBER_STRINGS=true env var returns BIGINT/DECIMAL values as strings, preserving full precision for snowflake IDs and values exceeding Number.MAX_SAFE_INTEGER. (by @duyiliu)
Remote MCP parallel hang — Fixed a hang in IS_REMOTE_MCP=true mode where two concurrent POST /mcp requests caused one to never return. Now creates a per-request Server instance instead of sharing the module-level one. (by @tomer-azar)

Added repository, bugs, and homepage fields to package.json so npm users can navigate back to the source. (by @SyntaxHQDEV)

Added Codex CLI plugin manifest for listing in the Codex plugin ecosystem. (by @internet-dot)

Improved README for better navigation and project clarity.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track benborla29/mcp-server-mysql

Get notified when new releases ship.

About benborla29/mcp-server-mysql

MySQL database integration in NodeJS with configurable access controls and schema inspection