mariadb-corporation mariadb-connector-j

• CVE-2026-119281 Medium 5.9 MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing 0.3%
• CVE-2026-119280 Low 3.7 MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths 0.3%
• CVE-2026-119279 Medium 5.9 MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths 0.4%
• CVE-2026-119278 Medium 5.9 MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication 0.4%
• CVE-2026-119277 Medium 5.9 MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths 0.4%
• CVE-2026-119276 Medium 5.9 MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets 0.4%
• CVE-2026-119210 Medium 5.9 MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files 0.3%
• CVE-2026-61700 Low 3.7 MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests 0.4%
• CVE-2026-55858 Medium 5.9 MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client 0.9%
• CVE-2026-55857 Medium 5.9 MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials 0.4%
• CVE-2026-55856 Medium 5.9 MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake 0.4%