NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #2623 most downloaded on npm
fast mysql driver. Implements core protocol, prepared statements, ssl and compression in native JS
Last release 10 days ago
08 Sep 2026
Ships fairly regularly
a new release about every 1 weeks
Nearly every release is documented
notes for 60 of the last 60 stable releases
1 version withdrawn
withdrawn after publishing
13 years old
325 releases · first in 2013
Nothing published for this version
Nothing published for this version
Nothing published for this version
One column per quarter.
Nothing published for this version
Nothing published for this version
Nothing published for this version
handle malformed geometry payloads (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight))
null-terminated string read to packet end (fixes a potential OOB read reported by Doruk Tan Ozturk (peaktwilight)) (#4161) (91c5229)URL-defined connection options (fixes a potential config injection vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#4162) (3123b4e)Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
use server's preferred auth method to eliminate auth switch roundtrip
Nothing published for this version
Nothing published for this version
types: add supportBigNumbers, bigNumberStrings, dateStrings, and timezone options to QueryOptions
supportBigNumbers, bigNumberStrings, dateStrings, and timezone options to QueryOptions (#4127) (b274e72)QueryValues to callback-based methods (#4129) (2ad5f0b)ExecuteValues "nested" params (#4133) (3f94950)Raw and Uint8Array params (#4132) (bde9aec)Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
types: ensure optional params in query and execute methods
Nothing published for this version
add Symbol.dispose and Symbol.asyncDispose support for Connections, Pools, and Pool Clusters
Nothing published for this version
add missing charset encoding for UTF8MB4_0900_BIN
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
## 3.17.4 (2026-02-20) ### Bug Fixes * fix types for query values
fix PoolConnection.end callback and promise resolution
format: distinguish delimiters in queries from SQL comments
expand object params after ON DUPLICATE KEY UPDATE preceded by SET
security: resolve a potential SQL injection bypass through objects
constants: remove unsupported CLIENT_DEPRECATE_EOF flag from constants
Nothing published for this version
types: add missing ConnectionState type to Promise Connection interface
Nothing published for this version
Nothing published for this version
named-placeholders: improve handling of mixed/nested quotes in query parsing
Nothing published for this version
BaseConnection: add state getter to track connection lifecycle
Nothing published for this version
skip SNI for IP addresses in TLS connection
Nothing published for this version
fix sha256_password to work correctly over a TLS connection
Nothing published for this version
typings: fix missing callback to PoolCluster.end()
Nothing published for this version
Nothing published for this version
gracefully end pool connections #3148
Nothing published for this version
types: restrict StreamOptions.objectMode to true
Nothing published for this version
stream: destroy connection when stream errors
Nothing published for this version
Nothing published for this version
Nothing published for this version
resolve parser cache collision with dual typeCast connections
Nothing published for this version
pass columnType to readDateTimeString
Your coding agent can read these notes before it upgrades. Set up the MCP server →