server
mariadb-13.0.2MariaDB server is a community developed fork of MySQL server. Started by core members of the original MySQL team, MariaDB actively works with outside developers to deliver the most featureful, stable, and sanely licensed open SQL server in the industry.
- Maintenance
- Active581 commits in 3 months · bus factor 7
- License
- GPL-2.0Copyleft · OSI-approved
- Security
- 28 advisories4 critical, 12 high, 12 medium · Scorecard 4.8/10
- Supported versions
- No scheduleendoflife.date does not track this project
8.6k stars · 2.3k forks · 601 open issues · last release 2 months ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 28 most recent advisories published by the maintainers: 4 critical, 12 high, 12 medium. Check the patched version against the one you run.
- mediumGHSA-cp3h-jjxp-9pvrNov 13, 2026Out-of-bound buffer read in ST_NumPoints() and ST_NumGeometries() of a truncated WKB
- Affected
- 10.6.1-10.6.25, 10.11.1-10.11.16, 11.4.1-11.4.10, 11.8.1-11.8.6, 12.3.1
- Patched in
- 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2
- highCVE-2026-107814Sep 21, 2026Insecure $HOME in MariaDB rpm packages
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- criticalCVE-2026-92262Sep 7, 2026Numerous issues caused by historical #mysql50# tablename encoding bypass
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- mediumCVE-2026-85745Sep 7, 2026Out-of-bound buffer read in ST_Area() of a MultiPolygon
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- criticalCVE-2026-85746Sep 7, 2026Out-of-bound buffer write on in ST_AsText() of nested GeometryCollections
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- criticalCVE-2026-85748Sep 7, 2026Use-after-free with a large number of SYS_REFCURSOR's
- Affected
- 12.3.1-12.3.2, 13.0.1
- Patched in
- 12.3.3, 13.0.2
- mediumCVE-2026-85985Sep 7, 2026Unauthorized file access via CONNECT engine UDFs
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- highCVE-2026-86047Sep 7, 2026Insufficient quoting in mariadb-dump and SHOW commands
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- highCVE-2026-97380Sep 7, 2026GRANT PROXY with empty password incorrectly checks grantor's privileges
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- highCVE-2026-102523Sep 7, 2026Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION
- Affected
- 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- highCVE-2026-107823Sep 7, 2026privilege escalation via incorrect view frm parsing
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- mediumCVE-2026-107822Sep 7, 2026database privilege escalation via user / role name collision in the acl cache
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- highCVE-2026-107821Sep 7, 2026insufficient validation of binary frm data when opening a table
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- mediumCVE-2026-107819Sep 7, 2026libmariadb allowed cleartext password leakage on TLS hostname verification failure
- Affected
- 3.4.1–3.4.9
- Patched in
- 3.4.10
- highCVE-2026-107818Sep 7, 2026environment injection via wsrep bootstrap in the mariadb.service file
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- highCVE-2026-107815Sep 7, 2026One byte out-of-bound buffer write in DOS tables of the CONNECT engine
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- mediumCVE-2026-107816Sep 7, 2026`qc_info` plugin can do OOB reads if query contains \0
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- mediumCVE-2026-107817Sep 7, 2026mysql_json plugin OOB reads
- Affected
- 10.6.1-10.6.27, 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, 13.0.1
- Patched in
- 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
- highCVE-2026-48165Jun 2, 2026unsafe usage of `wsrep_sst_receive_address` values on the joiner side
- Affected
- 10.6.1-10.6.26, 10.11.1-10.11.17, 11.4.1-11.4.11, 11.8.1-11.8.7, 12.3.1
- Patched in
- 10.6.27, 10.11.18, 11.4.12, 11.8.8, 12.3.2
- highCVE-2026-48163Jun 2, 2026wsrep SST unsafe parameter handling on the donor side (rsync)
- Affected
- 10.6.1-10.6.26, 10.11.1-10.11.17, 11.4.1-11.4.11, 11.8.1-11.8.7, 12.3.1
- Patched in
- 10.6.27, 10.11.18, 11.4.12, 11.8.8, 12.3.2
- criticalCVE-2026-49261Jun 2, 2026unsafe parameter handing in `wsrep_notify_cmd`
- Affected
- 10.6.1-10.6.26, 10.11.1-10.11.17, 11.4.1-11.4.11, 11.8.1-11.8.7, 12.3.1
- Patched in
- 10.6.27, 10.11.18, 11.4.12, 11.8.8, 12.3.2
- mediumCVE-2026-44172May 18, 2026mysql_real_escape_string() incorrectly handled big5
- Affected
- 3.3.1–3.3.18, 3.4.1–3.4.8
- Patched in
- 3.3.19, 3.4.9
- highCVE-2026-44168May 18, 2026wsrep SST unsafe parameter handling on the donor side
- Affected
- 10.6.1-10.6.25, 10.11.1-10.11.16, 11.4.1-11.4.10, 11.8.1-11.8.6, 12.3.1
- Patched in
- 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2
- mediumCVE-2026-44171May 18, 2026path traversal in mbstream
- Affected
- 10.6.1-10.6.25, 10.11.1-10.11.16, 11.4.1-11.4.10, 11.8.1-11.8.6, 12.3.1
- Patched in
- 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2
- mediumCVE-2026-44169May 18, 2026Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
- Affected
- 11.4.1-11.4.10, 11.8.1-11.8.6, 12.3.1
- Patched in
- 11.4.11, 11.8.7, 12.3. 2
- mediumCVE-2026-44170May 18, 2026Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL
- Affected
- 10.6.1-10.6.25, 10.11.1-10.11.16, 11.4.1-11.4.10, 11.8.1-11.8.6, 12.3.1
- Patched in
- 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2
- mediumCVE-2026-44173May 18, 2026FILE privilege was not checked for subqueries in the FROM clause
- Affected
- 10.6.1-10.6.25, 10.11.1-10.11.16, 11.4.1-11.4.10, 11.8.1-11.8.6, 12.3.1
- Patched in
- 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2.
- highCVE-2026-32710Mar 20, 2026Heap-based Buffer Overflow in JSON_SCHEMA_VALID()
- Affected
- 11.4.1-11.4.9, 11.8.1-11.8.5, 12.1.2
- Patched in
- 11.4.10, 11.8.6, 12.2.2