org.mariadb.jdbc:mariadb-java-client
Maven9 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.mariadb.jdbc:mariadb-java-clientpage 1 of 1
- CVE-2026-119210MEDIUMCVSS 5.9EG 5.9fixed in 3.3.7, 3.4.5 or 3.5.11, by version range2026-10-29
vulnerable: 3.0.1-beta ... 3.3.6 (24 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the ClientMessage.validateLocalFileName() check used a regular expression that could match LOA…
- CVE-2026-119276MEDIUMCVSS 5.9EG 5.9fixed in 3.3.7, 3.4.5 or 3.5.11, by version range2026-10-29
vulnerable: 3.0.1-beta ... 3.3.6 (24 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, when CLIENT_SESSION_TRACK was negotiated, the OkPacket.parse() and OkPacket.parseWithInfo() pa…
- CVE-2026-119279MEDIUMCVSS 5.9EG 5.9fixed in 3.3.7, 3.4.5 or 3.5.10, by version range2026-10-29
vulnerable: 3.0.1-beta ... 3.3.6 (24 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength() and ReadableByteBuf.readIntLengthEncodedNotNull() methods nar…
- CVE-2026-119280LOWCVSS 3.7EG 3.7fixed in 3.3.7, 3.4.5 or 3.5.11, by version range2026-10-29
vulnerable: 3.0.1-beta ... 3.3.6 (24 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.recover() and MariaDbPoolPinnedConnection.recover() implementations …
- CVE-2026-119281MEDIUMCVSS 5.9EG 5.9fixed in 3.3.7, 3.4.5 or 3.5.11, by version range2026-10-29
vulnerable: 3.0.1-beta ... 3.3.6 (24 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result bytes were UTF-8 but guarded only changes to character_set_client…
- CVE-2026-55856MEDIUMCVSS 5.9EG 5.9fixed in 2.7.14, 3.3.5, 3.4.3 or 3.5.9, by version range2026-08-28
vulnerable: 3.5.0 ... 3.5.8 (9 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a pass…
- CVE-2026-55857MEDIUMCVSS 5.9EG 5.9fixed in 2.7.14, 3.3.5, 3.4.3 or 3.5.9, by version range2026-08-28
vulnerable: 3.5.0 ... 3.5.8 (9 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecur…
- CVE-2026-55858MEDIUMCVSS 5.9EG 5.9fixed in 2.7.14, 3.3.5, 3.4.3 or 3.5.9, by version range2026-08-28
vulnerable: 3.5.0 ... 3.5.8 (9 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the ass…
- CVE-2026-61700LOWCVSS 3.7EG 3.7fixed in 2.7.14, 3.3.5, 3.4.3 or 3.5.9, by version range2026-09-17
vulnerable: 3.5.0 ... 3.5.8 (9 versions)
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, ClientMessage.readPacket processes a server-initiated LOCAL INFILE protocol packet 0xfb without…
Check whether org.mariadb.jdbc:mariadb-java-client is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.mariadb.jdbc:mariadb-java-client CVEs against the assets you own.
Book a Demo →