com.despegar:galera-java-client (>=1.0.11, <=1.0.20), us.fatehi:schemacrawler-mariadb (>=14.05.02, <=14.05.04) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.despegar:galera-java-client =1.0.11, =14.05.02, =14.05.04 Source cves: CVE-2026-617...

org.codefilarete.stalactite:core-mariadb-adapter (1.0.0), org.codefilarete.stalactite:sql-mariadb-adapter (1.0.0) +5 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.codefilarete.stalactite:core-mariadb-adapter 1.0.0 -...

us.fatehi:schemacrawler-mariadb (>=14.06.04, <=14.07.02) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - us.fatehi:schemacrawler-mariadb =14.06.04, =14.07.02 Source cves: CVE-2026-61700 Source...

org.sakaiproject.kernel.deploy:common (>=11.0, <=11.3), us.fatehi:schemacrawler-mariadb (>=14.07.03, <=14.07.05) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.sakaiproject.kernel.deploy:common =11.0, =14.07.03, =14.07.05 Source cves:...

us.fatehi:schemacrawler-mariadb (14.07.08) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - us.fatehi:schemacrawler-mariadb 14.07.08 Source cves: CVE-2026-61700 Source advisory:...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-61700 Source advisory: GHSA-WXMM-Q36W-R9XJ...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +400 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-61700 Source advisory: OSV:GHSA-WXMM-Q36W-R9XJ...

io.zipkin:zipkin-collector-service (>=1.26.0, <=1.39.2), io.zipkin:zipkin-query-service (>=1.26.0, <=1.39.2) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin:zipkin-collector-service =1.26.0, =1.26.0, =1.39.2 Source cves: CVE-2026-6170...

io.github.knowstack:kf-job-spring-boot-starter (>=1.0.0, <=2.0.2), io.github.knowstack:kf-security-test (1.0.0) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.github.knowstack:kf-job-spring-boot-starter =1.0.0, =1.0.26, =1.24.0, =1.24.0, =1.25...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass through the ClientMessage server-initiated LOCAL INFILE handling in src/main/java/org/mariadb/jdbc/message/ClientMessage.java. An attacker can make the client send a local file by replying to a LOAD DATA LOCAL INFI...

com.ecfront.dew:logger (>=1.1.0, <=1.1.4), io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=1.23.1, <=1.26.0) +25 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.ecfront.dew:logger =1.1.0, =1.23.1, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =3.0.0, =0.36.3...

org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security (2.2.0), org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security-4 (2.2.0) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.7.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security 2.2.0 -...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +400 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

io.zipkin.dependencies:zipkin-dependencies (1.11.3), io.zipkin.dependencies:zipkin-dependencies-mysql (1.11.3) +6 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.7.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.11.3 -...

com.randomnoun.db:sql-explainerator (>=0.0.2, <=1.0.1) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.8.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.randomnoun.db:sql-explainerator =0.0.2, =1.0.1 Source cves: CVE-2026-61700 Source...

SUSE CVE-2026-91951

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urbsendcurrentframenumberresult function. A malicious RDP server can send a crafted 28-byte USB redirection message to trigger a 4-byte write past the allocated 16-byte buffer, causing denia...

SUSE CVE-2026-91964

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.4-rc1, <=6.0.5), com.cloudbees.thirdparty:zendesk-java-client (>=1.5.0, <=1.6.1) +43 more potentially affected by CVE-2026-85716 via org.asynchttpclient:async-http-client (>=3.0.9, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.9, =6.0.4-rc1, =1.5.0, =5.0.0, =5.0.0, =1.17.15, =1.17.15, =1.17.15, =252.1.0, =11.2.1, =2.0.0, =4.20.0, =4.20.0, =4.23.0 and more Source cves: CVE-2026-85716 Source advisory: MEND:CVE-2026-85716...