What’s Vulnerable › Products

mariadb-corporation mariadb-connector-nodejs vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your mariadb-corporation mariadb-connector-nodejs version is affected

Latest mariadb-corporation mariadb-connector-nodejs vulnerabilities

• CVE-2026-107385 — MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES (CVSS 7.4)
• CVE-2026-107384 — MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) (CVSS 8.1)
• CVE-2026-107383 — MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters (CVSS 7.5)
• CVE-2026-107382 — MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS (CVSS 5.9)
• CVE-2026-55855 — MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets (CVSS 6.5)
• CVE-2026-55854 — MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb (CVSS 5.9)
• CVE-2026-55215 — MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true` (CVSS 7.5)