CVE-2026-55858 MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the SendPamAuthPacketFactory process. An attacker can obtain sensitive authentication credentials by intercepting network traffic or acting as a man-in-the-middle server during the authentication...

com.despegar:galera-java-client (>=1.0.11, <=1.0.20), us.fatehi:schemacrawler-mariadb (>=14.05.02, <=14.05.04) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.despegar:galera-java-client =1.0.11, =14.05.02, =14.05.04 Source cves: CVE-2026-558...

io.zipkin.dependencies:zipkin-dependencies (1.11.2), io.zipkin.dependencies:zipkin-dependencies-mysql (1.11.2) +1 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.7.1)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.11.2 -...

com.stratio.crossdata.connector:crossdata-cassandra (>=1.0.0, <=1.2.2), com.stratio.crossdata.connector:crossdata-cassandra_2.10 (>=1.3.0, <=1.5.0) +43 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.2.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.stratio.crossdata.connector:crossdata-cassandra =1.0.0, =1.3.0, =1.3.0, =1.0.0,...

io.github.knowstack:kf-job-spring-boot-starter (>=1.0.0, <=2.0.2), io.github.knowstack:kf-security-test (1.0.0) +4 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.github.knowstack:kf-job-spring-boot-starter =1.0.0, =1.0.26, =1.24.0, =1.24.0, =1.25...

net.oneandone.cosmo:cosmo-core (>=1.0.10-rc, <=1.0.29), us.fatehi:schemacrawler-mariadb (14.07.06) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - net.oneandone.cosmo:cosmo-core =1.0.10-rc, =1.0.29 - us.fatehi:schemacrawler-mariadb...

edu.uiuc.ncsa.myproxy:oa4mp-client-oauth1 (>=3.3, <=3.4), edu.uiuc.ncsa.myproxy:oa4mp-client-oauth2 (>=3.3, <=3.4) +10 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.4.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - edu.uiuc.ncsa.myproxy:oa4mp-client-oauth1 =3.3, =3.3, =3.3, =3.3, =3.3, =3.3, =3.3, =3....

us.fatehi:schemacrawler-mariadb (14.07.08) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - us.fatehi:schemacrawler-mariadb 14.07.08 Source cves: CVE-2026-55857 Source advisory:...

io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=0.21.0, <=1.0.0), us.fatehi:schemacrawler-mariadb (>=14.08.01, <=14.08.02) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.4.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-storage-mysql =0.21.0, =14.08.01, =14.08.02 Source...

com.boxfuse.client:com.boxfuse.client.gradle.plugin (>=1.19.5.972, <=1.36.2.2021), com.ins.gradle.plugin.boxfuse:com.ins.gradle.plugin.boxfuse.gradle.plugin (1.0.1) +5 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.4.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.boxfuse.client:com.boxfuse.client.gradle.plugin =1.19.5.972, =1.19.5.972, =1.1.0,...

com.moomanow.web:moomanowwebapp (>=0.0.2, <=0.0.10), org.apereo.cas:cas-server-support-jdbc (>=5.1.0-rc1, <=5.1.0-rc2) +4 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.5.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.moomanow.web:moomanowwebapp =0.0.2, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1,...

io.zipkin.dependencies:zipkin-dependencies (1.6.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.6.1) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.6.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.6.1 -...

io.zipkin.dependencies:zipkin-dependencies (1.11.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.11.1) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.7.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.11.1 -...

ch.inftec.flyway:flyway-extension-commandline (>=1.3.1-beta-2, <=3.2.1-final), ch.inftec.flyway:flyway-extension-example (>=1.3.1-beta-2, <=3.2.1-final) +39 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.1.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ch.inftec.flyway:flyway-extension-commandline =1.3.1-beta-2, =1.3.1-beta-2, =1.0, =2.1....

at.chrl:chrl-orm-spring-integration (1.1.0), com.centurylink.mdw:mdw (>=6.0.05, <=6.0.06) +4 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.2.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - at.chrl:chrl-orm-spring-integration 1.1.0 - com.centurylink.mdw:mdw =6.0.05, =6.0.03,...

org.sakaiproject.kernel.deploy:common (>=11.0, <=11.3), us.fatehi:schemacrawler-mariadb (>=14.07.03, <=14.07.05) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.sakaiproject.kernel.deploy:common =11.0, =14.07.03, =14.07.05 Source cves:...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.5.0, <=3.8.0), com.tmsps:ne4spring (>=1.6.6, <=999.0.0.0) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.5.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.5.0, =1.6.6, =999.0.0.0 Source cves: CVE-2026-558...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +400 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-55857 Source advisory: GHSA-QXVW-FVWX-5CP7...

io.zipkin.dependencies:zipkin-dependencies (>=2.0.1, <=2.0.8), io.zipkin.dependencies:zipkin-dependencies-mysql (>=2.0.1, <=2.0.8) +12 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.7.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies =2.0.1, =2.0.1, =0.20.17, =0.38.5, =0.40.0,...