CVE-2026-107382
1 advisory.
npm/mariadb CVE-2026-107382: medium 5.9
MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
Action: Upgrade mariadb to 3.5.4 or later.
npm i mariadb@3.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.3.0 | 3.5.4 | - |
Fixed versions
| 3.5.4 |
Sources
- osv: GHSA-cx2f-j9fh-8g68
- https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68
- https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915
- https://github.com/mariadb-corporation/mariadb-connector-nodejs
- https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4
- https://jira.mariadb.org/browse/CONJS-356
CVE-2026-107382 · published · modified · JSON