EUVD-2026-68020

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-55857 Source advisory: MEND:CVE-2026-55857...

at.chrl:chrl-orm-spring-integration (1.1.0), bayern.steinbrecher:dbconnector (>=0.10, <=0.15) +635 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (>=1.1.7, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =1.1.7, =0.10, =3.5.0, =5.6.5, =1.3.1-beta-2, =1.3.1-beta-2, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =1.0.5 and more Source cves: CVE-2026-55857 Source advisory: MEND:CVE-2026-55857...

ch.vorburger.mariadb4j:mariadb4j-app (3.2.0), cn.zpcnet.beanforge:beanforge-cli (0.2.0) +182 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (>=3.4.0, <=3.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.4.0, =1.0.2, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =7.0.0, =7.0.0, =9.1.1 and more Source cves: CVE-2026-55857 Source advisory: MEND:CVE-2026-55857...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +399 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-55857 Source advisory: MEND:CVE-2026-55857...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-55856 Source advisory: OSV:GHSA-G9JJ-CGMH-9F38...

org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security (2.2.0), org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security-4 (2.2.0) +4 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.7.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security 2.2.0 -...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +399 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-55856 Source advisory: GHSA-G9JJ-CGMH-9F38...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-55856 Source advisory: GHSA-G9JJ-CGMH-9F38...

com.ecfront.dew:logger (>=1.1.0, <=1.1.4), io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=1.23.1, <=1.26.0) +25 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.ecfront.dew:logger =1.1.0, =1.23.1, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =3.0.0, =0.36.3...

com.tmsps:ne4spring (>=1.0, <=1.5.2), org.cloudfoundry.identity:cloudfoundry-identity-api (>=2.3.1, <=3.20.0) +12 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.1.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.tmsps:ne4spring =1.0, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =3.0.0, =2.3.1, =0.2,...

com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.5.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...

io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=1.26.1, <=1.29.3) potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.6.1)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-storage-mysql =1.26.1, =1.29.3 Source cves:...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-55856 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19428608...

ch.vorburger.mariadb4j:mariadb4j-app (3.2.0), cn.zpcnet.beanforge:beanforge-cli (0.2.0) +182 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (>=3.4.0, <=3.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.4.0, =1.0.2, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =7.0.0, =7.0.0, =9.1.1 and more Source cves: CVE-2026-55856 Source advisory: GHSA-G9JJ-CGMH-9F38...

us.fatehi:schemacrawler-mariadb (>=14.04.01, <=14.04.04) potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.3.0-beta-2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - us.fatehi:schemacrawler-mariadb =14.04.01, =14.04.04 Source cves: CVE-2026-55856...

com.despegar:galera-java-client (>=1.0.9, <=1.0.10) potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.2.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.despegar:galera-java-client =1.0.9, =1.0.10 Source cves: CVE-2026-55856 Source...

io.zipkin:zipkin-collector-service (>=1.26.0, <=1.39.2), io.zipkin:zipkin-query-service (>=1.26.0, <=1.39.2) potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.3.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin:zipkin-collector-service =1.26.0, =1.26.0, =1.39.2 Source cves: CVE-2026-5585...

com.sos-berlin:jobscheduler.engine (1.12.0), com.speedment:speedment-maven-plugin (>=3.0.3, <=3.0.5) +5 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.5.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.sos-berlin:jobscheduler.engine 1.12.0 - com.speedment:speedment-maven-plugin =3.0.3...

io.zipkin.dependencies:zipkin-dependencies (1.11.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.11.1) potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.7.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.11.1 -...