mariadb-connector-nodejs — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in mariadb-connector-nodejs, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-107385	MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES CWE-89	7.4	High	2026-10-08
CVE-2026-107384	MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) CWE-89	8.1	High	2026-10-08
CVE-2026-107383	MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters CWE-200	7.5	High	2026-10-08
CVE-2026-107382	MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS CWE-248	5.9	Medium	2026-10-08
CVE-2026-55855	MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets CWE-89	6.5	Medium	2026-08-28
CVE-2026-55854	MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb CWE-319	5.9	Medium	2026-08-28
CVE-2026-55215	MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true` CWE-295	7.5	High	2026-08-28

All 7 known CVE vulnerabilities affecting mariadb-connector-nodejs with full Chinese analysis, references, and POCs where available.