CVE-2026-107382

Published 8 October 2026 · tracked since 9 October 2026

Description

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-validation path calls Ed25519PasswordAuth.hash() through Authentication.validateFingerPrint, but Ed25519PasswordAuth.hash() re

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107322 HIGH 7.8
• CVE-2026-105570
• CVE-2026-101998
• CVE-2026-105452
• CVE-2026-107379 MEDIUM 6.5
• CVE-2026-107380 MEDIUM 5.4
• CVE-2026-107376 HIGH 8.2
• CVE-2026-107377 HIGH 7.5
• CVE-2026-107361 MEDIUM 4.2
• CVE-2026-107362 HIGH 7.1

→ Open the live CVE board · all tools