{"action":"Upgrade org.mariadb.jdbc:mariadb-java-client to 2.7.14 (2.7.x), 3.3.5 (3.3.x), 3.4.3 (3.4.x) or 3.5.9 (3.5.x) or later.","affected":[{"fixed":"2.7.14","introduced":"0"},{"fixed":"3.3.5","introduced":"3.0.0"},{"fixed":"3.4.3","introduced":"3.4.0"},{"fixed":"3.5.9","introduced":"3.5.0"}],"component":"org.mariadb.jdbc:mariadb-java-client","cve_ids":["CVE-2026-55856"],"ecosystem":"Maven","epss":0.00443,"exploited":false,"fixed_versions":["2.7.14","3.3.5","3.4.3","3.5.9"],"ghsa_id":"GHSA-g9jj-cgmh-9f38","id":"tcs_01M5N8XXPN0FF5BZ61BMGHQ9H2","modified_at":"2026-09-10T03:50:53.696281286Z","published_at":"2026-08-28T22:41:56Z","references":["https://osv.dev/vulnerability/GHSA-g9jj-cgmh-9f38","https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-g9jj-cgmh-9f38","https://github.com/mariadb-corporation/mariadb-connector-j/commit/149ec6a626376214966c01f42d48be1b80d06056","https://github.com/mariadb-corporation/mariadb-connector-j/commit/d90b9872322c76b05a48219be66bff1d33102f8a","https://hackerone.com/reports/3777370","https://github.com/mariadb-corporation/mariadb-connector-j","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9","https://jira.mariadb.org/browse/CONJ-1325"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-g9jj-cgmh-9f38","url":"https://osv.dev/vulnerability/GHSA-g9jj-cgmh-9f38"}],"summary":"MariaDB has cleartext password disclosure to a MITM on the initial-handshake"}