# mysql-mcp v3.0.2 Release Notes
**Patch release** with bug fixes, security patches, and dependency updates.
## Fixed
- **ESLint test coverage** — Added ESLint config block for test files to catch unused imports/variables; fixed 16 pre-existing errors across 8 test files
- **Docker Hub description update** — Fixed `docker-publish.yml` conditionals to match tag pushes instead of branch pushes
## Security
- **CVE Fix: `minimatch` ReDoS (GHSA-23c5-xmqv-rm74)** — Updated transitive dependency `minimatch` (via `eslint`, `typescript-eslint`) from 10.2.2 to 10.2.4 via `npm audit fix` to fix a high-severity ReDoS vulnerability caused by combinatorial backtracking in `matchOne()`
- **CVE Fix: `minimatch` ReDoS (CVE-2026-27904)** — Patched npm's bundled `minimatch` (<10.2.3) in the Dockerfile runtime stage to fix a high-severity ReDoS vulnerability (CVSS 7.5)
## Dependencies
- `@types/node`: 25.3.1 → 25.3.2
- `minimatch`: 10.2.2 → 10.2.4 (transitive, via `npm audit fix`)
- `mysql2`: 3.18.1 → 3.18.2
## Install
```bash
npm install -g @neverinfamous/mysql-mcp@3.0.2
```
```bash
docker pull writenotenow/mysql-mcp:v3.0.2
```
**Full Changelog:** [v3.0.1...v3.0.2](https://github.com/neverinfamous/mysql-mcp/compare/v3.0.1...v3.0.2)