{"schema":"vulnpedia.research/1","cve":"CVE-2026-107384","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-v6pj-gxxw-phfw","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-v6pj-gxxw-phfw"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-v6pj-gxxw-phfw"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-v6pj-gxxw-phfw"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-v6pj-gxxw-phfw"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/144b8f4ef29539a9fb4b75d972b9dcdac4088b4e","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/144b8f4ef29539a9fb4b75d972b9dcdac4088b4e"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/144b8f4ef29539a9fb4b75d972b9dcdac4088b4e"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/144b8f4ef29539a9fb4b75d972b9dcdac4088b4e"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/144b8f4ef29539a9fb4b75d972b9dcdac4088b4e"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/6743b2f4a89b074268b44c650170767f35e1fb5d","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/6743b2f4a89b074268b44c650170767f35e1fb5d"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/6743b2f4a89b074268b44c650170767f35e1fb5d"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/6743b2f4a89b074268b44c650170767f35e1fb5d"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/6743b2f4a89b074268b44c650170767f35e1fb5d"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/8eb450972ff0f3826d7d45c071a42240798bc826","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/8eb450972ff0f3826d7d45c071a42240798bc826"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/8eb450972ff0f3826d7d45c071a42240798bc826"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/8eb450972ff0f3826d7d45c071a42240798bc826"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/8eb450972ff0f3826d7d45c071a42240798bc826"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/b9b04ec82a60b2caf2b0c038259ca9aff5d7014a","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/b9b04ec82a60b2caf2b0c038259ca9aff5d7014a"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/b9b04ec82a60b2caf2b0c038259ca9aff5d7014a"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/b9b04ec82a60b2caf2b0c038259ca9aff5d7014a"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/b9b04ec82a60b2caf2b0c038259ca9aff5d7014a"}]},{"url":"https://hackerone.com/reports/3889198","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://hackerone.com/reports/3889198"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://hackerone.com/reports/3889198"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://hackerone.com/reports/3889198"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://hackerone.com/reports/3889198"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.2.5","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.2.5"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.2.5"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.2.5"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.2.5"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.3.4","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.3.4"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.3.4"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.3.4"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.3.4"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.4.7","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.4.7"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.4.7"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.4.7"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.4.7"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4"}]},{"url":"https://jira.mariadb.org/browse/CONJS-369","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-08T18:32:30.156Z","url":"https://jira.mariadb.org/browse/CONJS-369"},{"source":"nvd","sourceId":"CVE-2026-107384","modified":"2026-10-09T19:16:41.390","url":"https://jira.mariadb.org/browse/CONJS-369"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://jira.mariadb.org/browse/CONJS-369"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://jira.mariadb.org/browse/CONJS-369"}]},{"url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","origins":[{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw"}]},{"url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","origins":[{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs"},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs"}]},{"source":"euvd","sourceId":"EUVD-2026-95143","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95143","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95143","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95143"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw","ecosystem":"npm","name":"mariadb","purl":"pkg:npm/mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-v6pj-gxxw-phfw/GHSA-v6pj-gxxw-phfw.json"},"modified":"2026-10-16T09:55:54.224043608Z","origins":[{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw"}]},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw","ecosystem":"npm","name":"mariadb","purl":"pkg:npm/mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"3.3.0"},{"fixed":"3.3.4"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-v6pj-gxxw-phfw/GHSA-v6pj-gxxw-phfw.json"},"modified":"2026-10-16T09:55:54.224043608Z","origins":[{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw"}]},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw","ecosystem":"npm","name":"mariadb","purl":"pkg:npm/mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"3.4.0"},{"fixed":"3.4.7"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-v6pj-gxxw-phfw/GHSA-v6pj-gxxw-phfw.json"},"modified":"2026-10-16T09:55:54.224043608Z","origins":[{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw"}]},{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw","ecosystem":"npm","name":"mariadb","purl":"pkg:npm/mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"3.5.0-rc.0"},{"fixed":"3.5.4"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-v6pj-gxxw-phfw/GHSA-v6pj-gxxw-phfw.json"},"modified":"2026-10-16T09:55:54.224043608Z","origins":[{"source":"ghsa","sourceId":"GHSA-v6pj-gxxw-phfw","modified":"2026-10-16T09:55:54.224043608Z","url":"https://osv.dev/vulnerability/GHSA-v6pj-gxxw-phfw"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}