mariadb-corporation/mariadb-connector-nodejs Security Advisories | GitStock

high2026-10-08

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

GHSA-r3rv-jm3r-62q2 · CVE-2026-107385

high2026-10-08

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

GHSA-v6pj-gxxw-phfw · CVE-2026-107384

high2026-10-08

MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

GHSA-48qf-xh34-q73r · CVE-2026-107383

medium2026-10-08

MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

GHSA-cx2f-j9fh-8g68 · CVE-2026-107382

medium2026-08-28

MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets

GHSA-g5xc-5w98-jfvm · CVE-2026-55855

medium2026-08-28

MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

GHSA-42r5-vhpq-m858 · CVE-2026-55854

high2026-08-28

MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

GHSA-cqhc-2h57-wpxf · CVE-2026-55215