mariadb-corporation mariadb-connector-nodejs

• CVE-2026-107385 High 7.4 MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES 0.4%
• CVE-2026-107384 High 8.1 MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) 0.4%
• CVE-2026-107383 High 7.5 MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters 0.4%
• CVE-2026-107382 Medium 5.9 MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS 0.2%
• CVE-2026-55855 Medium 6.5 MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets 0.7%
• CVE-2026-55854 Medium 5.9 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb 0.4%
• CVE-2026-55215 High 7.5 MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true` 0.6%