MariaDB for Node.js

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:mariadb:-:*:*:*:*:node.js:*:*

part: a version: - update: *

VendorMariadb (7f603b14-ed39-5458-877b-2a349be64aa8)
ProductMariadb (f53ad24a-fa82-58e9-8aea-d11d98960d9a)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mariadb-server purl2cpe 2026-06-01 10:16:17.674955
pkg:deb/ubuntu/mariadb-server purl2cpe 2026-06-01 10:16:17.674956
pkg:docker/mariadb/mariadb-docker purl2cpe 2026-06-01 10:16:17.674958
pkg:docker/mariadb/server purl2cpe 2026-06-01 10:16:17.674959
pkg:github/mariadb/server purl2cpe 2026-06-01 10:16:17.674961
pkg:rpm/fedora/mariadb purl2cpe 2026-06-01 10:16:17.674962
pkg:rpm/opensuse/mariadb purl2cpe 2026-06-01 10:16:17.674963

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-27766 vulnerable 2026-06-08 06:31:29.158530 Details available
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Published: 2024-10-17T00:00:00.000Z
Updated: 2024-10-20T23:34:58.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39593 vulnerable 2026-06-08 06:09:37.810193 Details available
Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Published: 2024-10-17T00:00:00.000Z
Updated: 2024-10-20T23:41:10.199Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.