{"action":"Upgrade org.mariadb.jdbc:mariadb-java-client to 2.7.14 (2.7.x), 3.3.5 (3.3.x), 3.4.3 (3.4.x) or 3.5.9 (3.5.x) or later.","affected":[{"fixed":"2.7.14","introduced":"0"},{"fixed":"3.3.5","introduced":"3.0.0"},{"fixed":"3.4.3","introduced":"3.4.0"},{"fixed":"3.5.9","introduced":"3.5.0"}],"component":"org.mariadb.jdbc:mariadb-java-client","cve_ids":["CVE-2026-55857"],"ecosystem":"Maven","epss":0.0039,"exploited":false,"fixed_versions":["2.7.14","3.3.5","3.4.3","3.5.9"],"ghsa_id":"GHSA-qxvw-fvwx-5cp7","id":"tcs_01M5N9AKDGDYGTZREPBV5THJRB","modified_at":"2026-09-10T03:50:54.150899935Z","published_at":"2026-08-28T22:45:01Z","references":["https://osv.dev/vulnerability/GHSA-qxvw-fvwx-5cp7","https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-qxvw-fvwx-5cp7","https://github.com/mariadb-corporation/mariadb-connector-j/commit/a8599ab1cbe4b8818ea945bf56a4e012c302b388","https://github.com/mariadb-corporation/mariadb-connector-j/commit/f4a727c764d1cf48fd0c3d5e301dfa92503e0a58","https://github.com/mariadb-corporation/mariadb-connector-j","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9","https://jira.mariadb.org/browse/CONJ-1320"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-qxvw-fvwx-5cp7","url":"https://osv.dev/vulnerability/GHSA-qxvw-fvwx-5cp7"}],"summary":"org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials"}