mariadb
npm7 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting mariadbpage 1 of 1
- CVE-2026-107382MEDIUMCVSS 5.9EG 5.9fixed in 3.5.42026-10-08
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-validation path calls Ed25519PasswordAuth.hash() through Authenti…
- CVE-2026-107383HIGHCVSS 7.5EG 7.5fixed in 3.2.5, 3.3.4, 3.4.7 or 3.5.4, by version range2026-10-08
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe() alloca…
- CVE-2026-107384HIGHCVSS 8.1EG 8.1fixed in 3.2.5, 3.3.4, 3.4.7 or 3.5.4, by version range2026-10-08
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7, and 3.5.4, applications that enable permitSetMultiParamEntries can pass objects whose keys…
- CVE-2026-107385HIGHCVSS 7.4EG 7.4fixed in 3.2.5, 3.3.4, 3.4.7 or 3.5.4, by version range2026-10-08
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, text-protocol escaping always prefixes quotes with a backslash and does not honor the s…
- CVE-2026-55215HIGHCVSS 7.5EG 7.5fixed in 3.2.4, 3.3.3, 3.4.6 or 3.5.3, by version range2026-08-28
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node…
- CVE-2026-55854MEDIUMCVSS 5.9EG 5.9fixed in 3.2.4, 3.3.3, 3.4.6 or 3.5.3, by version range2026-08-28
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js can disclose an account password when PAM dialog authenticati…
- CVE-2026-55855MEDIUMCVSS 6.5EG 6.5fixed in 3.2.4, 3.3.4, 3.4.6 or 3.5.3, by version range2026-08-28
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js permits SQL injection when attacker-controlled Buffer paramet…
Check whether mariadb is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for mariadb CVEs against the assets you own.
Book a Demo →