NPM: MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

NPM: MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS vulnerability discovered by ? in WordPress Npm mariadb versions = 3.3.0, 3.5.4...

CVE-2026-107382 MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-validation path calls Ed25519PasswordAuth.hash through Authentication.validateFingerPrint, but Ed25519PasswordAuth.hash...

CVE-2026-107382

The MariaDB Connector/Node.js (versions 3.3.0 to 3.5.4 ) is vulnerable to a denial of service due to an uncaught exception during ed25519 authentication with zero-configuration TLS. The root cause is that the Ed25519PasswordAuth.hash() function references a seed identifier that is out of scope wi...