Login Request a demo
MA
Product
mariadb-connector-nodejs
by mariadb-corporation · last CVE Oct 8, 2026
7
CVEs
0
On KEV
8.1
Max CVSS
4
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 4Medium 3Low 0
Severity
All severities7Critical0High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add mariadb-connector-nodejs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107384
8.1
0%
Oct 8
MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)
Affected: >= 3.2.0, < 3.2.5; >= 3.3.0, < 3.3.4; >= 3.4.0, < 3.4.7; >= 3.5.0-rc.0, < 3.5.4
CVE-2026-107383
7.5
0%
Oct 8
MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters
Affected: < 3.2.5; >= 3.3.0, < 3.3.4; >= 3.4.0, < 3.4.7; >= 3.5.0-rc.0, < 3.5.4
CVE-2026-55215
7.5
1%
Aug 28
MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`
Affected: < 3.2.4
CVE-2026-107385
7.4
0%
Oct 8
MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES
Affected: < 3.2.5; >= 3.3.0, < 3.3.4; >= 3.4.0, < 3.4.7; >= 3.5.0-rc.0, < 3.5.4
Showing 4