mariadb
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES | mariadb | npm | High | Fix reported | |
| MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) | mariadb | npm | High | Fix reported | |
| MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters | mariadb | npm | High | Fix reported | |
| MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS | mariadb | npm | Medium | Fix reported | |
| MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets | mariadb | npm | Medium | Fix reported | |
| MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials | mariadb | npm | Medium | Fix reported | |
| MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true` | mariadb | npm | High | Fix reported |