io.zipkin.dependencies:zipkin-dependencies (>=1.7.0, <=1.10.3), io.zipkin.dependencies:zipkin-dependencies-mysql (>=1.7.0, <=1.10.3) +1 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.6.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies =1.7.0, =1.7.0, =1.29.4, =2.0.1 Source cves:...

io.zipkin.dependencies:zipkin-dependencies (1.6.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.6.1) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.6.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.6.1 -...

com.ecfront.dew:logger (>=1.1.0, <=1.1.4), io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=1.23.1, <=1.26.0) +25 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.ecfront.dew:logger =1.1.0, =1.23.1, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =3.0.0, =0.36.3...

com.sos-berlin:jobscheduler.engine (1.12.0), com.speedment:speedment-maven-plugin (>=3.0.3, <=3.0.5) +5 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.5.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.sos-berlin:jobscheduler.engine 1.12.0 - com.speedment:speedment-maven-plugin =3.0.3...

com.despegar:galera-java-client (>=1.0.9, <=1.0.10) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.2.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.despegar:galera-java-client =1.0.9, =1.0.10 Source cves: CVE-2026-55857 Source...

com.gitlab.java-ebms-adapter:ebms-core (2.15.2-mic), org.jiucai:appframework (2.1.2) +5 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.1.9)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.gitlab.java-ebms-adapter:ebms-core 2.15.2-mic - org.jiucai:appframework 2.1.2 -...

com.tmsps:ne4spring (>=1.0, <=1.5.2), org.cloudfoundry.identity:cloudfoundry-identity-api (>=2.3.1, <=3.20.0) +12 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.1.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.tmsps:ne4spring =1.0, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =3.0.0, =2.3.1, =0.2,...

ch.inftec.flyway:flyway-extension-commandline (>=1.3.1-beta-2, <=3.2.1-final), ch.inftec.flyway:flyway-extension-example (>=1.3.1-beta-2, <=3.2.1-final) +39 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.1.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ch.inftec.flyway:flyway-extension-commandline =1.3.1-beta-2, =1.3.1-beta-2, =1.0, =2.1....

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the SendPamAuthPacketFactory process. An attacker can obtain sensitive authentication credentials by intercepting network traffic or acting as a man-in-the-middle server during the authentication...

GHSA-QXVW-FVWX-5CP7 org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Summary When PAM dialog authentication is used, the connector can be coerced into sending the account password in cleartext over an insecure connection. A hostile or man-in-the-middle server can trigger this with the default configuration, disclosing the user's password. Details The...

org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Summary When PAM dialog authentication is used, the connector can be coerced into sending the account password in cleartext over an insecure connection. A hostile or man-in-the-middle server can trigger this with the default configuration, disclosing the user's password. Details The...

io.zipkin.dependencies:zipkin-dependencies (1.11.2), io.zipkin.dependencies:zipkin-dependencies-mysql (1.11.2) +1 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.7.1)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.11.2 -...

com.github.jingxiaohu:platform_base (1.0.0), io.zipkin.dependencies:zipkin-dependencies (>=1.10.4, <=1.11.0) +6 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.6.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.github.jingxiaohu:platformbase 1.0.0 - io.zipkin.dependencies:zipkin-dependencies...

io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=1.26.1, <=1.29.3) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.6.1)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-storage-mysql =1.26.1, =1.29.3 Source cves:...

com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.5.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...

com.moomanow.web:moomanowwebapp (>=0.0.2, <=0.0.10), org.apereo.cas:cas-server-support-jdbc (>=5.1.0-rc1, <=5.1.0-rc2) +4 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.5.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.moomanow.web:moomanowwebapp =0.0.2, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1,...

io.github.knowstack:kf-job-spring-boot-starter (>=1.0.0, <=2.0.2), io.github.knowstack:kf-security-test (1.0.0) +4 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.github.knowstack:kf-job-spring-boot-starter =1.0.0, =1.0.26, =1.24.0, =1.24.0, =1.25...

us.fatehi:schemacrawler-mariadb (>=14.04.01, <=14.04.04) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.0-beta-2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - us.fatehi:schemacrawler-mariadb =14.04.01, =14.04.04 Source cves: CVE-2026-55857...

com.stratio.crossdata.connector:crossdata-cassandra (>=1.0.0, <=1.2.2), com.stratio.crossdata.connector:crossdata-cassandra_2.10 (>=1.3.0, <=1.5.0) +43 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.2.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.stratio.crossdata.connector:crossdata-cassandra =1.0.0, =1.3.0, =1.3.0, =1.0.0,...

at.chrl:chrl-orm-spring-integration (1.1.0), com.centurylink.mdw:mdw (>=6.0.05, <=6.0.06) +4 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.2.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - at.chrl:chrl-orm-spring-integration 1.1.0 - com.centurylink.mdw:mdw =6.0.05, =6.0.03,...