{"action":"Upgrade org.mariadb.jdbc:mariadb-java-client to 2.7.14 (2.7.x), 3.3.5 (3.3.x), 3.4.3 (3.4.x) or 3.5.9 (3.5.x) or later.","affected":[{"fixed":"2.7.14","introduced":"0"},{"fixed":"3.3.5","introduced":"3.0.0"},{"fixed":"3.4.3","introduced":"3.4.0"},{"fixed":"3.5.9","introduced":"3.5.0"}],"component":"org.mariadb.jdbc:mariadb-java-client","cve_ids":["CVE-2026-61700"],"ecosystem":"Maven","epss":0.00366,"exploited":false,"fixed_versions":["2.7.14","3.3.5","3.4.3","3.5.9"],"ghsa_id":"GHSA-wxmm-q36w-r9xj","id":"tcs_01M5N9HDHTBBVY3Y91H35E7JSF","modified_at":"2026-09-17T16:45:06.427034260Z","published_at":"2026-09-17T16:29:53Z","references":["https://osv.dev/vulnerability/GHSA-wxmm-q36w-r9xj","https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wxmm-q36w-r9xj","https://github.com/mariadb-corporation/mariadb-connector-j/commit/0205d8be947918566cd9ce5a9db149541bbc8dee","https://github.com/mariadb-corporation/mariadb-connector-j","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-wxmm-q36w-r9xj","url":"https://osv.dev/vulnerability/GHSA-wxmm-q36w-r9xj"}],"summary":"MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests"}