CVE-2026-55855

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-55855
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55855.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-55855
Aliases
Published
2026-08-28T22:06:42.810Z
Modified
2026-08-30T03:46:21.239850318Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
Summary
MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets
Details

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js permits SQL injection when attacker-controlled Buffer parameters are escaped client-side under the big5, gbk, sjis, cp932, or gb18030 client character sets. PacketOutputStream.writeBufferEscape in lib/io/packet-output-stream.js escaped bytes without the charset-aware getMbRecognizer logic in lib/misc/charset-mb.js. The server SQL lexer runs my_ismbchar before escape processing, so an attacker-controlled lead byte can consume the inserted 0x5C backslash as a multibyte trail byte and leave the following 0x27 quote unescaped, terminating the string literal and allowing arbitrary SQL. The default utf8mb4 character set and parameters sent through the execute binary prepared-statement path are not affected. Successful exploitation can expose or modify data available to the database account. This issue is fixed in versions 3.2.4, 3.3.3, 3.4.6, and 3.5.3.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55855.json",
    "cwe_ids": [
        "CWE-116",
        "CWE-89"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/mariadb-corporation/mariadb-connector-nodejs

Affected ranges

Type
GIT
Repo
https://github.com/mariadb-corporation/mariadb-connector-nodejs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Introduced
b65aca10b77f5ede83f16a8edd0537b2ef12a16f
Introduced
24a58245cba201da91f41f7f96f8dd165d31c6c7
Fixed
e0064ca9171b0046ad4be1a1dc1771e7dd0bcd96
Fixed
14e0f16bd78584b3b24db33c1c6e62e3a3d241a2
Fixed
07e6f631a6052649b72e9aa024583d305ac7611d
Fixed
1d50f7210af2e01bf90b155e073f041952901839
Fixed
25c6239b68fd909132355c3f8535a5ef32423468
Fixed
26e35f9edb00bcf249627a564e0052fba7b305a2
Fixed
7af8b7b8b7ae5e1a081693ade989f5a80c8e06e3
Fixed
97f183f33b5d4e6767b34ecabdd81fe3294a80a6
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.2.4"
        },
        {
            "introduced": "3.5.0"
        },
        {
            "fixed": "3.5.3"
        },
        {
            "introduced": "3.3.0"
        },
        {
            "fixed": "3.3.3"
        },
        {
            "introduced": "3.4.0"
        },
        {
            "fixed": "3.4.6"
        }
    ]
}

Affected versions

0.*
0.7.0
2.*
2.0.3
2.0.5
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.2.0
2.3.0
2.4.0
2.4.1
2.4.2
2.5.0
2.5.1
2.5.2
2.5.3
2.5.4
2.5.6
3.*
3.0.0-ga
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.4.0
3.4.1
3.4.2
3.4.3
3.4.4
3.4.5
3.5.0-rc.0
3.5.1
3.5.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55855.json"