{"action":"Upgrade mariadb to 3.5.4 or later.","affected":[{"fixed":"3.5.4","introduced":"3.3.0"}],"component":"mariadb","cve_ids":["CVE-2026-107382"],"ecosystem":"npm","exploited":false,"fixed_versions":["3.5.4"],"ghsa_id":"GHSA-cx2f-j9fh-8g68","id":"tcs_01M5JHH9QDQ561XEKVSSFQZN1K","modified_at":"2026-10-16T09:56:02.258409116Z","published_at":"2026-10-08T19:42:04Z","references":["https://osv.dev/vulnerability/GHSA-cx2f-j9fh-8g68","https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68","https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915","https://github.com/mariadb-corporation/mariadb-connector-nodejs","https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4","https://jira.mariadb.org/browse/CONJS-356"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-cx2f-j9fh-8g68","url":"https://osv.dev/vulnerability/GHSA-cx2f-j9fh-8g68"}],"summary":"MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS"}