Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mariadb-corporation — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting mariadb-corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page documents vulnerability aggregations for the vendor mariadb-corporation, specifically focusing on software weaknesses within their product ecosystem. It collects a comprehensive range of security issues identified in MariaDB server components, database management tools, and related enterprise solutions. The data covers vulnerabilities reported from 2009 to the present, capturing the full historical scope of security findings associated with this vendor’s releases and patches. By reviewing this aggregation, you can track a vendor's advisories as they evolve over time, observing how reported issues are addressed across different versions and update cycles. You can also understand a weakness class in the context of database infrastructure, analyzing how common vulnerability types impact open-source relational database systems maintained by mariadb-corporation. Furthermore, you can look up a product's vulnerability history to assess the long-term security posture of specific MariaDB distributions, identifying trends in remediation speed and recurring issue categories. This resource supports security professionals, developers, and system administrators who need to evaluate risks, plan updates, and maintain compliance by providing a centralized view of known security flaws without requiring manual searches across multiple disparate sources. The information is structured to facilitate efficient risk assessment and informed decision-making regarding software deployment and maintenance strategies.

CVE ID Title CVSS Severity Published
CVE-2026-107385 MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES — mariadb-connector-nodejs CWE-89 7.4 High 2026-10-08
CVE-2026-107384 MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) — mariadb-connector-nodejs CWE-89 8.1 High 2026-10-08
CVE-2026-107383 MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters — mariadb-connector-nodejs CWE-200 7.5 High 2026-10-08
CVE-2026-107382 MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS — mariadb-connector-nodejs CWE-248 5.9 Medium 2026-10-08
CVE-2026-61700 MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests — mariadb-connector-j CWE-284 3.7 Low 2026-09-17
CVE-2026-55860 MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport) — mariadb-connector-r2dbc CWE-319 5.9 Medium 2026-08-28
CVE-2026-55859 MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb — mariadb-connector-r2dbc CWE-116 5.9 Medium 2026-08-28
CVE-2026-55858 MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client — mariadb-connector-j CWE-838 5.9 Medium 2026-08-28
CVE-2026-55857 MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials — mariadb-connector-j CWE-319 5.9 Medium 2026-08-28
CVE-2026-55856 MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake — mariadb-connector-j CWE-522 5.9 Medium 2026-08-28
CVE-2026-55855 MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets — mariadb-connector-nodejs CWE-89 6.5 Medium 2026-08-28
CVE-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb — mariadb-connector-nodejs CWE-319 5.9 Medium 2026-08-28
CVE-2026-55215 MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true` — mariadb-connector-nodejs CWE-295 7.5 High 2026-08-28

This page lists every published CVE security advisory associated with mariadb-corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.