{"action":"Upgrade org.mariadb.jdbc:mariadb-java-client to 2.7.14 (2.7.x), 3.3.5 (3.3.x), 3.4.3 (3.4.x) or 3.5.9 (3.5.x) or later.","affected":[{"fixed":"2.7.14","introduced":"0"},{"fixed":"3.3.5","introduced":"3.0.0"},{"fixed":"3.4.3","introduced":"3.4.0"},{"fixed":"3.5.9","introduced":"3.5.0"}],"component":"org.mariadb.jdbc:mariadb-java-client","cve_ids":["CVE-2026-55858"],"ecosystem":"Maven","epss":0.00873,"exploited":false,"fixed_versions":["2.7.14","3.3.5","3.4.3","3.5.9"],"ghsa_id":"GHSA-xvr9-35cr-46v9","id":"tcs_01M5N9K1QCWQYZW3FK6FW9VJCZ","modified_at":"2026-09-10T03:51:14.914708998Z","published_at":"2026-08-28T22:47:19Z","references":["https://osv.dev/vulnerability/GHSA-xvr9-35cr-46v9","https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-xvr9-35cr-46v9","https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69","https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","https://github.com/mariadb-corporation/mariadb-connector-j","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/2.7.14","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.3.5","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3","https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9","https://jira.mariadb.org/browse/CONJ-1317"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-xvr9-35cr-46v9","url":"https://osv.dev/vulnerability/GHSA-xvr9-35cr-46v9"}],"summary":"org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context"}