All 3 CVE vulnerabilities found in mariadb-connector-nodejs, with AI-generated Chinese analysis, references, and POCs.
Vendor: mariadb-corporation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-55855 | MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets CWE-89 | 6.5 | Medium | 2026-08-28 |
| CVE-2026-55854 | MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb CWE-319 | 5.9 | Medium | 2026-08-28 |
| CVE-2026-55215 | MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true` CWE-295 | 7.5 | High | 2026-08-28 |
All 3 known CVE vulnerabilities affecting mariadb-connector-nodejs with full Chinese analysis, references, and POCs where available.