CVE 2019-14939

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

See the CVE page on Mitre.org for more details.