Skip to contentMariadb-corporation Mariadb-connector-j vulnerabilities
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticingCVE-2026-119281Fix available5.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengthsCVE-2026-119280Fix available3.7 Low
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengthsCVE-2026-119279Fix available5.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authenticationCVE-2026-119278Fix available5.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengthsCVE-2026-1192775.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packetsCVE-2026-119276Fix available5.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client filesCVE-2026-119210Fix available5.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requestsCVE-2026-61700Fix available3.7 Low
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-clientCVE-2026-55858Fix available5.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected CredentialsCVE-2026-55857Fix available5.9 Medium
- mariadb-corporation mariadb-connector-jMariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshakeCVE-2026-55856Fix available5.9 Medium