{"action":"Upgrade mariadb to 10.3.27-r0 or later.","affected":[{"fixed":"10.3.27-r0","introduced":"10.2.0"}],"component":"mariadb","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.10","exploited":false,"fixed_versions":["10.3.27-r0"],"id":"tcs_01M5NCK75SZVX1RTR2MHGXMKY8","modified_at":"2026-10-26T11:17:55.165882096Z","published_at":"2020-12-24T20:15:12.460Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-28912","https://security.alpinelinux.org/vuln/CVE-2020-28912"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-28912","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-28912"}],"summary":"With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the na"}