Mysql vulnerable version

We have a ticket in our backlog to upgrade, but it’s not on our immediate list of things to do.

This is mostly due to the various reasons that @johnlang86 articulated (ie, these DB’s are only bound on the loopback interface)