[ Vendor · 4 CVEs ]
mariadb-corporation
CVEs affecting mariadb-corporation published in the last 30 days, plus any mariadb-corporation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107385 | 8 Oct 2026 | CVSS 7.4 | MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPESMariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and… | Fix |
| CVE-2026-107382 | 8 Oct 2026 | CVSS 5.9 | MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSMariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the… | Fix |
| CVE-2026-107383 | 8 Oct 2026 | CVSS 7.5 | MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersMariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and… | Fix |
| CVE-2026-107384 | 8 Oct 2026 | CVSS 8.1 | MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7… | Fix |