Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.mariadb.jdbc:mariadb-java-client

9 known vulnerabilities (7 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
9 · 7 medium, 2 low
Registry
Maven Central

Advisories 9

  • CVE-2026-119281Medium 5.9

    MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing

    Affected: from 3.0.0, fixed in 3.3.7; from 3.4.0, fixed in 3.4.5; from 3.5.0, fixed in 3.5.11.

  • MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths

    Affected: from 3.0.0, fixed in 3.3.7; from 3.4.0, fixed in 3.4.5; from 3.5.0, fixed in 3.5.11.

  • CVE-2026-119279Medium 5.9

    MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths

    Affected: from 3.0.0, fixed in 3.3.7; from 3.4.0, fixed in 3.4.5; from 3.5.0, fixed in 3.5.10.

  • CVE-2026-119276Medium 5.9

    MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets

    Affected: from 3.0.0, fixed in 3.3.7; from 3.4.0, fixed in 3.4.5; from 3.5.0, fixed in 3.5.11.

  • CVE-2026-119210Medium 5.9

    MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server…

    Affected: from 3.0.0, fixed in 3.3.7; from 3.4.0, fixed in 3.4.5; from 3.5.0, fixed in 3.5.11.

  • MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests

    Affected: fixed in 2.7.14; from 3.0.0, fixed in 3.3.5; from 3.4.0, fixed in 3.4.3; from 3.5.0, fixed in 3.5.9.

  • CVE-2026-55858Medium 5.9

    MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

    Affected: fixed in 2.7.14; from 3.0.0, fixed in 3.3.5; from 3.4.0, fixed in 3.4.3; from 3.5.0, fixed in 3.5.9.

  • CVE-2026-55857Medium 5.9

    MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

    Affected: fixed in 2.7.14; from 3.0.0, fixed in 3.3.5; from 3.4.0, fixed in 3.4.3; from 3.5.0, fixed in 3.5.9.

  • CVE-2026-55856Medium 5.9

    MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake

    Affected: fixed in 2.7.14; from 3.0.0, fixed in 3.3.5; from 3.4.0, fixed in 3.4.3; from 3.5.0, fixed in 3.5.9.